Kitodo.presentation vulnerabilities

1 known vulnerability in Kitodo.presentation from Kitodo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Kitodo.presentation: Server-Side Request Forgery

  CVE-2022-24980Feb 19, 2022KitodoEPSS 1.2%

  An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component. This res