Impact This vulnerability would allow any user, regardless of permissions, to upload content into a repository. This affects installations of Islandora core 2.0 or greater. Patches Upgrade immediately to the "latest release" (https://github.com/Islandora/islandora/releases/tag/2.4.1) of Islandora. Workarounds In lieu of an upgrade the "following module" (https://github.com/Islandora/islandora_ghsa_route_fix) can be leveraged that will resolve the issue until such a time an upgrade can take place. For more information If you have any questions or comments about this advisory: * Open an issue in "Islandora" (https://github.com/Islandora/islandora) * Contact community@islandora.ca.