The MARC framework import/export function (admin/import_export_framework.pl) in Koha prior to 3.8.23, 3.10.x prior to 3.10.13, 3.12.x prior to 3.12.10, and 3.14.x prior to 3.14.3 does not require authentication, which allows remote malicious users to conduct SQL injection attacks via unspecified vectors.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
koha koha |