CVE-2017-1000237

I, Librarian version =4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user's password...

CVE-2017-1000234

I, Librarian version =4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating directories simply by navigating through the "dir" parameter...

CVE-2024-54819

CVE-2024-54819 – I, Librarian : The vulnerability affects Librarian up to version 5.11.1, caused by improper input validation in classes/security/validation.php, enabling Server-Side Request Forgery (SSRF). The impact is supported by multiple sources and indicates high risk (CVSS 3.1: CRITICAL, n...