CVE-2008-1627: Cds Software Consortium Invenio

Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days.

CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.

Affected products

• Cds Software Consortium Invenio: up to and including 0.92.1

Published 2008-04-02. Last modified 2026-06-16.