Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-30076

Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mitre

Description

Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Koha Koha

Default version status: unknown

  • 0 to < 22.11.24affected
  • 23 to < 23.11.12affected
  • 24 to < 24.05.07affected
  • 24.06 to < 24.11.02affected

References