PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-11-05T00:00:00
Updated: 2024-08-02T21:09:35.901Z
Reserved: 2023-11-05T00:00:00
Link: CVE-2023-47271
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-11-06T00:15:09.317
Modified: 2023-12-20T01:15:07.297
Link: CVE-2023-47271
Redhat
No data.