CVE-2023-44962

Summary

CVE-2023-44962 is a file upload vulnerability affecting Koha Library Software versions 23.05.04 and older. This issue allows remote attackers to read arbitrary files through the upload-cover-image.pl component, potentially leading to unauthorized access to sensitive information. An attacker could exploit this vulnerability by uploading a malicious file and then accessing other files on the system. Library institutions using Koha Software are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.