NetSight
high7.2

CVE-2024-28739

An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.

Impact

An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.

Affected products

VendorProductAffected versions
KohaKoha
through 23.05.00

Weakness classification

References