Intranda Goobi Viewer Core
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Intranda Goobi Viewer Core.
By the Year
In 2026 there have been 0 vulnerabilities in Intranda Goobi Viewer Core. Goobi Viewer Core did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 3 | 6.10 |
It may take a day or so for new Goobi Viewer Core vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Intranda Goobi Viewer Core Security Vulnerabilities
Goobi Viewer XSS via LOGID prior to 23.03
CVE-2023-29014
6.1 - Medium
- April 06, 2023
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the user's browser. The vulnerability has been fixed in version 23.03.
XSS
Goobi Viewer XSS via Nickname - Fixed in 23.03
CVE-2023-29016
6.1 - Medium
- April 06, 2023
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts into their profile's nickname, resulting in the execution in the user's browser when displaying the nickname on certain pages. The vulnerability has been fixed in version 23.03.
XSS
Goobi Viewer XSS via Comment Field before 23.03
CVE-2023-29015
6.1 - Medium
- April 06, 2023
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in the user comment feature of Goobi viewer core prior to version 23.03. An attacker could create a specially crafted comment, resulting in the execution of malicious script code in the user's browser when displaying the comment. The vulnerability has been fixed in version 23.03.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Intranda Goobi Viewer Core or by Intranda? Click the Watch button to subscribe.
