https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T15:44:45.813207+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-214387 EUVD-2026-214387 2026-10-12T15:44:45.816064+00:00 EUVD-2026-214387 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29014 fkie_cve-2023-29014 2026-10-12T15:44:45.816092+00:00

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user's browser. The vulnerability has been fixed in version 23.03.

 https://cve.radiocsirt.org/vuln/ghsa-7v7g-9vx6-vcg2 GHSA-7v7g-9vx6-vcg2 — Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter 2026-10-12T15:44:45.816124+00:00

Affected: Maven: io.goobi.viewer:viewer-core

### Impact A reflected cross-site scripting vulnerability has been identified in Goobi viewer core when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user's browser.

### Patches The vulnerability has been fixed in version 23.03

### Credits We would like to thank [RUS-CERT](https://cert.uni-stuttgart.de/) for reporting this issues.

If you have any questions or comments about this advisory: * Email us at [support@intranda.com](mailto:support@intranda.com)

 https://cve.radiocsirt.org/vuln/gsd-2023-29014 gsd-2023-29014 2026-10-12T15:44:45.816153+00:00 gsd-2023-29014