Koha Community Koha Library Software
2 CVEs affecting Koha Community Koha Library Software. Latest disclosed: 2023-10-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44961 | High | 7.5 | 2023-10-11 | SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cat… |
CVE-2023-44962 | Medium | 5.3 | 2023-10-11 | File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component. |