Read the docs

Openlibraryfoundation

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Openlibraryfoundation records in CISA KEV

No Openlibraryfoundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mod-data-export-spring 1 record MEDIUM Mod-remote-storage 1 record LOW

Records

2 records

TI-2024-15705 CVE-2024-23687 · GHSA-vf78-3q9f-92g3

FOLIO mod-data-export-spring Hard-Coded Credentials

Priority MEDIUM 48

Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00652 Published 2024-01-19 Fixed in 1.5.4, 2.0.2 CWE-798
TI-2024-15703 CVE-2024-23685 · GHSA-m8v7-469p-5x89

FOLIO mod-remote-storage Hard Coded Credentials

Priority LOW 31

Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00527 Published 2024-01-19 Fixed in 1.7.2, 2.0.3 CWE-798
Open these records in search →