CVE-2022-31194— Path traversal vulnerabilities in DSpace JSPUI submission upload
Quick assessment
Affected
DSpace DSpace
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
DSpace是DuraSpace社区的一个开源的交钥匙存储库应用程序。 DSpace 4.0 到 6.3版本存在路径遍历漏洞，该漏洞源于SubmissionController 和 FileUploadRequest 中的 JSPUI允许攻击者通过在提交期间修改一些请求参数，在服务器上任何位置创建 Tomcat/DSpace 用户可写的文件或目录。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1105 · Ingress Tool Transfer
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-31194
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Path traversal vulnerabilities in DSpace JSPUI submission upload
Source: CVE Program / CVE List V5
Vulnerability Description
DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to multiple path traversal attacks, allowing an attacker to create files/directories anywhere on the server writable by the Tomcat/DSpace user, by modifying some request parameters during submission. This path traversal can only be executed by a user with special privileges (submitter rights). This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds. However, this vulnerability cannot be exploited by an anonymous user or a basic user. The user must first have submitter privileges to at least one Collection and be able to determine how to modify the request parameters to exploit the vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
DSpace 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
DSpace是DuraSpace社区的一个开源的交钥匙存储库应用程序。 DSpace 4.0 到 6.3版本存在路径遍历漏洞，该漏洞源于SubmissionController 和 FileUploadRequest 中的 JSPUI允许攻击者通过在提交期间修改一些请求参数，在服务器上任何位置创建 Tomcat/DSpace 用户可写的文件或目录。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-31194
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/shoucheng3/DSpace__DSpace_CVE-2022-31194_5-10 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-31194
请登录查看更多情报信息。
Patches & Fixes for CVE-2022-31194 (2)
Vendor Advisories for CVE-2022-31194 (1)
-
https://github.com/DSpace/DSpace/security/advisories/GHSA-qp5m-c3m9-8q2p x_refsource_CONFIRM
Same Patch Batch · DSpace · 2022-08-01 · 7 CVEs total
| CVE-2022-31195 | 7.2 HIGH | Path traversal vulnerability in Simple Archive Format package import in DSpace |
| CVE-2022-31191 | 7.1 HIGH | Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools |
| CVE-2022-31192 | 7.1 HIGH | Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature |
| CVE-2022-31193 | 7.1 HIGH | URL Redirection to Untrusted Site in Dspace JSPUI |
| CVE-2022-31189 | 5.3 MEDIUM | "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sa |
| CVE-2022-31190 | 5.3 MEDIUM | Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI |
IV. Related Vulnerabilities
Same product: DSpace
-
CVE-2025-53622
DSpace has path traversal vulnerability in Simple Archive Fo -
CVE-2025-53621
DSpace vulnerable to XML External Entity (XXE) injection in -
CVE-2024-38364
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML d -
CVE-2022-31195
Path traversal vulnerability in Simple Archive Format packag -
CVE-2022-31192
Cross Site Scripting possible in DSpace JSPUI "Request a Cop
Same vendor: DSpace
-
CVE-2025-53622
DSpace has path traversal vulnerability in Simple Archive Fo -
CVE-2025-53621
DSpace vulnerable to XML External Entity (XXE) injection in -
CVE-2024-38364
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML d -
CVE-2022-31195
Path traversal vulnerability in Simple Archive Format packag -
CVE-2022-31192
Cross Site Scripting possible in DSpace JSPUI "Request a Cop
Same weakness: CWE-22
-
CVE-2026-18899
Langflow is affected by multiple authentication bypass, path -
CVE-2026-55552
Yamcs: Unauthenticated Directory Traversal -
CVE-2026-55569
aqua: Archive extraction in aqua follows attacker-planted sy -
CVE-2026-82286
gpt-crawler Arbitrary File Write via outputFileName Paramete -
CVE-2026-82275
Qwen-Agent Arbitrary File Read via Caller-Supplied Document
V. Comments for CVE-2022-31194
No comments yet