CVE-2021-41189

CVE-2021-41189 describes a critical privilege escalation vulnerability in DSpace version 7.0, an open-source repository application. This flaw allows any community or collection administrator to elevate their privileges to a system administrator, gaining full control over the DSpace instance. The vulnerability carries a CVSS score of 7.2 (HIGH) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, organizations using DSpace 7.0 should upgrade to version 7.1 or implement the recommended workaround of temporarily disabling permission management for community/collection administrators.