Koha Community

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Koha Community records in CISA KEV

No Koha Community vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Koha Library Software 2 records HIGH

Records

2 records in Koha Library Software · all components

TI-2023-24038 CVE-2023-44961 · GHSA-wxx4-6h56-vw65

SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote…

HIGH 72

SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01437 Published 2023-10-11 No fix listed CWE-89

TI-2023-24039 CVE-2023-44962 · GHSA-h6w8-2mp2-vwq2

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote…

MEDIUM 63

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0125 Published 2023-10-11 No fix listed CWE-434

Open these records in search →

Critical	0
High	12
Medium	5
Low	0
No CVSS	0