PatchTheCVECVE-2022-31189: DSpace open source software is a repository application which provides durable access to digital resources
CVE-2022-31189 is a medium-severity flaw (CVSS 5.3) affecting dspace. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. When an "Internal System Error" occurs in the JSPUI, then entire exception (including stack trace) is available. Information in this stacktrace may be useful to an attacker in launching a more sophisticated attack. This vulnerability only impacts the JSPUI. This issue has been fixed in version 6.4.
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 46%) |
| CISA exploited list | No |
| Weakness | CWE-209 |
| Published | 2022-08-01 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-31189?
dspace: upgrade to 6.4. Exact commands for each OS are on this page.
Is CVE-2022-31189 being exploited?
CVE-2022-31189 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-31189 affect?
CVE-2022-31189 affects dspace. Severity is medium (CVSS 5.3). DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. When an "Internal System Error" occurs in the JSPUI, then entire exception (including sta
How urgent is CVE-2022-31189?
Priority 37/100. Remotely exploitable, no login, no user action
Related CVEs
- CVE-2025-61190 MEDIUM 6.1 DOWNGRADE A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search
- CVE-2022-31195 HIGH 7.2 UPGRADE DSpace open source software is a repository application which provides durable access to digital resources
- CVE-2022-31194 HIGH 8.2 UPGRADE DSpace open source software is a repository application which provides durable access to digital resources
- CVE-2022-31193 HIGH 7.1 UPGRADE DSpace open source software is a repository application which provides durable access to digital resources
- CVE-2022-31192 HIGH 7.1 UPGRADE DSpace open source software is a repository application which provides durable access to digital resources