Koha-community Koha Library Software — known CVE vulnerabilities

Every CVE whose affected-product data names Koha-community Koha Library Software, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-44961 — CVSS 7.5 (high): SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the…
• CVE-2023-44962 — CVSS 5.3 (medium): File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the…