CVE-2022-31195 is a path traversal vulnerability (CWE-22) affecting DSpace, an open-source repository application widely used for managing and providing durable access to digital resources. The vulnerability exists in the ItemImportServiceImpl component, which handles the import of Simple Archive Format (SAF) packages. Specifically, a malicious SAF package can exploit insufficient validation of file paths to cause files or directories to be created outside the intended restricted directory. This can lead to arbitrary file creation or overwriting anywhere the Tomcat/DSpace user has write permissions on the server. The vulnerability affects multiple user interfaces of DSpace, including XMLUI, JSPUI, and command-line tools. However, exploitation requires elevated privileges: only users with administrative rights or command-line access to the server can import SAF packages and thus trigger the vulnerability. Consequently, the attack surface is limited to trusted users or insiders with elevated access. The vulnerability affects DSpace versions >=4.0 and <5.11, and >=6.0 and <6.4. No known exploits have been reported in the wild to date. Mitigation includes upgrading to fixed versions and restricting access to administrative batch import URL paths (e.g., /admin/batchimport or /dspace-admin/batchimport) to prevent unauthorized use of the import functionality. The risk is mitigated if administrative users do not import untrusted SAF packages, as the vulnerability depends on the content of the imported archive. Overall, this vulnerability represents a moderate risk primarily due to its requirement for privileged access and the potential for arbitrary file creation on the server, which could lead to further compromise if exploited by a malicious insider or through credential compromise.

For European organizations using affected versions of DSpace, this vulnerability could allow an attacker with administrative or command-line access to create or overwrite files arbitrarily on the server hosting the repository. This could lead to unauthorized modification of repository data, insertion of malicious files, or disruption of service. Given that DSpace is often used by academic institutions, research organizations, and cultural heritage institutions across Europe, exploitation could compromise the integrity and availability of valuable digital assets. Additionally, if the server is shared or integrated with other systems, arbitrary file writes could facilitate privilege escalation or lateral movement within the network. However, the impact is limited by the prerequisite of elevated access, reducing the likelihood of external attackers exploiting this vulnerability directly. Insider threats or attackers who have already compromised administrative credentials pose the primary risk. The potential impact on confidentiality is moderate, as the vulnerability does not directly expose data but could be leveraged to implant backdoors or manipulate files. Integrity and availability impacts are more significant, as unauthorized file creation or modification could corrupt repository contents or disrupt services.

1. Upgrade DSpace to a version >=5.11 or >=6.4 where this vulnerability is patched. 2. Restrict access to administrative batch import URLs by implementing strict network-level controls such as IP whitelisting or VPN-only access to /admin/batchimport and /dspace-admin/batchimport endpoints. 3. Enforce strong authentication and authorization controls for administrative users to prevent credential compromise. 4. Implement rigorous auditing and monitoring of SAF package imports to detect suspicious or unauthorized activity. 5. Use file system permissions to limit the write capabilities of the Tomcat/DSpace user to only necessary directories, minimizing the impact of arbitrary file creation. 6. Educate administrative users on the risks of importing untrusted SAF packages and enforce policies to validate package contents before import. 7. Consider deploying web application firewalls (WAFs) with custom rules to block suspicious requests targeting batch import paths. 8. Regularly review and update server and application configurations to adhere to the principle of least privilege and minimize attack surface.