| Package | Affected versions | Patched versions |
|---|---|---|
| koha | ≥ 3.14.00, < 3.14.16≥ 3.16.00, < 3.16.12≥ 3.18.00, < 3.18.08≥ 3.20.00, < 3.20.01 | 3.14.163.16.123.18.083.20.01 |
Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1) svc/virtualshelves/search or (2) svc/members/search.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free