Scripta vulnerabilities
We track 3 vulnerabilities in Scripta products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
Latest Scripta vulnerabilities
- 8.5 High severity
eScriptorium: Server-Side Request Forgery
Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrary HTTP requests to internal hosts, including the cloud instance metadata service, v
- 7.1 High severity
eScriptorium: Missing Authorization
Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST re
- 8.8 High severity
eScriptorium: Authorization Bypass Through User-Controlled Key
Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supp