high7.7
CVE-2025-30076
Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.
Impact
Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.
Affected products
| Product | Affected versions |
|---|---|
| Koha | before 24.11.02 |
Versions were read from the advisory text. No structured product data has been published for this record yet.