| Package | Affected versions | Patched versions |
|---|---|---|
| koha | = 3.04.00= 3.04.01= 3.04.02= 3.04.03= 3.04.04= 3.04.05= 3.04.06= 3.06.00.000 | |
| liblime koha | ≤ 4.2 |
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free