CVE-2014-1922

HIGH 7.5CVE-2014-1922 · Published 24/01/2020 · updated 17/06/2026

In short

CVE-2014-1922 is a HIGH (CVSS 7.5) vulnerability affecting koha (koha).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.4% of all vulnerabilities.
Fix: update to 3.10.13, 3.12.10, 3.14.03, 3.08.23 or later.

Package	Affected versions	Patched versions
koha koha	`≥ 3.10.00, < 3.10.13≥ 3.12.00, < 3.12.10≥ 3.14.00, < 3.14.03< 3.08.23`	`3.10.133.12.103.14.033.08.23`

Description

Absolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote attackers to read arbitrary files via unspecified vectors.

References

bugs.koha-community.org/bugzilla3/show_bug.cgi · Exploit
koha-community.org/security-release-february-2014 · Vendor Advisory
openwall.com/lists/oss-security/2014/02/07/10 · Mailing List
openwall.com/lists/oss-security/2014/02/10/3 · Mailing List

More vulnerabilities in koha

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

koha

≥ 3.10.00, < 3.10.13≥ 3.12.00, < 3.12.10≥ 3.14.00, < 3.14.03< 3.08.23

3.10.133.12.103.14.033.08.23

More vulnerabilities in koha

See all →