https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 05:31:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214385 EUVD-2026-214385 https://cve.radiocsirt.org/vuln/euvd-2026-214385 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29016 <p>The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts into their profile&#39;s nickname, resulting in the execution in the user&#39;s browser when displaying the nickname on certain pages. The vulnerability has been fixed in version 23.03.</p> <p>The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts into their profile&#39;s nickname, resulting in the execution in the user&#39;s browser when displaying the nickname on certain pages. The vulnerability has been fixed in version 23.03.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29016 https://cve.radiocsirt.org/vuln/ghsa-2r9r-8fcg-m38g <p><strong>Affected:</strong> Maven: io.goobi.viewer:viewer-core</p> <p>### Impact A cross-site scripting vulnerability has been identified in Goobi viewer core when using nicknames. An attacker could create a user account and enter malicious scripts into their profile&#39;s nickname, resulting in the execution in the user&#39;s browser when displaying the nickname on certain pages.</p> <p>### Patches The vulnerability has been fixed in version 23.03</p> <p>If you have any questions or comments about this advisory: * Email us at [support@intranda.com](mailto:support@intranda.com)</p> <p><strong>Affected:</strong> Maven: io.goobi.viewer:viewer-core</p> <p>### Impact A cross-site scripting vulnerability has been identified in Goobi viewer core when using nicknames. An attacker could create a user account and enter malicious scripts into their profile&#39;s nickname, resulting in the execution in the user&#39;s browser when displaying the nickname on certain pages.</p> <p>### Patches The vulnerability has been fixed in version 23.03</p> <p>If you have any questions or comments about this advisory: * Email us at [support@intranda.com](mailto:support@intranda.com)</p> https://cve.radiocsirt.org/vuln/ghsa-2r9r-8fcg-m38g https://cve.radiocsirt.org/vuln/gsd-2023-29016 gsd-2023-29016 https://cve.radiocsirt.org/vuln/gsd-2023-29016