| Package | Affected versions | Patched versions |
|---|---|---|
| koha | ≥ 3.10.00, < 3.10.13≥ 3.12.00, < 3.12.10≥ 3.14.00, < 3.14.03< 3.08.23 | 3.10.133.12.103.14.033.08.23 |
Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allow remote attackers to write to arbitrary files via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free