Scripta - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-06.

Products

CVE-2026-18258 - CVSS 8.8 (high), 2026-08-06: Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote…
CVE-2026-18277 - CVSS 7.1 (high), 2026-08-06: Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant…
CVE-2026-18359 - CVSS 8.5 (high), 2026-08-06: Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the…
CVE-2026-18275 - CVSS 6.5 (medium), 2026-08-06: Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run…
CVE-2026-18276 - CVSS 4.3 (medium), 2026-08-06: Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's…