Описание
An issue in Koha v.25.11 and before allows a remote attacker to execute arbitrary code via the Z39.50 configuration module
An issue in Koha v.25.11 and before allows a remote attacker to execute arbitrary code via the Z39.50 configuration module
Связанные уязвимости
CVSS3: 6.5
nvd
3 месяца назад
Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times.
CVSS3: 6.5
debian
3 месяца назад
Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) ...