https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 15:43:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214387 EUVD-2026-214387 https://cve.radiocsirt.org/vuln/euvd-2026-214387 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29014 <p>The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user&#39;s browser. The vulnerability has been fixed in version 23.03.</p> <p>The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user&#39;s browser. The vulnerability has been fixed in version 23.03.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29014 https://cve.radiocsirt.org/vuln/ghsa-7v7g-9vx6-vcg2 <p><strong>Affected:</strong> Maven: io.goobi.viewer:viewer-core</p> <p>### Impact A reflected cross-site scripting vulnerability has been identified in Goobi viewer core when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user&#39;s browser.</p> <p>### Patches The vulnerability has been fixed in version 23.03</p> <p>### Credits We would like to thank [RUS-CERT](https://cert.uni-stuttgart.de/) for reporting this issues.</p> <p>If you have any questions or comments about this advisory: * Email us at [support@intranda.com](mailto:support@intranda.com)</p> <p><strong>Affected:</strong> Maven: io.goobi.viewer:viewer-core</p> <p>### Impact A reflected cross-site scripting vulnerability has been identified in Goobi viewer core when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user&#39;s browser.</p> <p>### Patches The vulnerability has been fixed in version 23.03</p> <p>### Credits We would like to thank [RUS-CERT](https://cert.uni-stuttgart.de/) for reporting this issues.</p> <p>If you have any questions or comments about this advisory: * Email us at [support@intranda.com](mailto:support@intranda.com)</p> https://cve.radiocsirt.org/vuln/ghsa-7v7g-9vx6-vcg2 https://cve.radiocsirt.org/vuln/gsd-2023-29014 gsd-2023-29014 https://cve.radiocsirt.org/vuln/gsd-2023-29014