Koha Library Software Security Vulnerabilities and Issues — Koha Library Software CVE List

Lucene search

Koha-communityKoha Library Software

2 matches found

CVE•added 2023/10/11 7:15 p.m.•56 views

CVE-2023-44961

SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl. component.

7.5CVSS7.7AI score0.06156EPSS

CVE•added 2023/10/11 7:15 p.m.•37 views

CVE-2023-44962

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component.

5.3CVSS5.3AI score0.03189EPSS