KI
Vendor
Kitodo
3
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54668 New | KI kitodo-production kitodo | 8.7 | Oct 23 | Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config) |
| CVE-2022-24980 | KI Kitodo.presentation Kitodo | 7.5 | Feb 19 | An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3 |
| CVE-2020-16095 | KI Kitodo.presentation Kitodo | 6.1 | Jul 29 | The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS |