critical10.0
CVE-2025-22954
GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter.
Impact
GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter.
Affected products
| Product | Affected versions |
|---|---|
| Koha | before 24.11.02 |
Versions were read from the advisory text. No structured product data has been published for this record yet.