4TUResearchData vulnerabilities
We track 2 vulnerabilities in 4TUResearchData products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest 4TUResearchData vulnerabilities
- 7.1 High severity
djehuty: Improper Neutralization of Special Elements in Data Query Logic
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated attacker can inject SPARQL into the search/listing queries through three separate parameters. Because the affected queries are read (SELECT)
- 8.4 High severity
djehuty: Improper Neutralization of Special Elements in Data Query Logic
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying (DELETE/INSERT) query by supplying a crafted session name, letting them write (an