medium5.3
CVE-2023-44962
File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component.
Impact
File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Koha-Community | Koha Library Software | through 23.05.04 |