Vulnerabilities

TI-2023-24039 CVE-2023-44962 · GHSA-h6w8-2mp2-vwq2

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote…

MEDIUM 63

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0125 Published 2023-10-11 No fix listed CWE-434

TI-2023-24038 CVE-2023-44961 · GHSA-wxx4-6h56-vw65

SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote…

HIGH 72

SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01437 Published 2023-10-11 No fix listed CWE-89

Vulnerabilities

Filters

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote…

SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote…