CVE-2025-22954
CVSS 3.1 Score 10 of 10 (high)
Details
Published Mar 12, 2025
Updated: Mar 18, 2025
CWE ID 89
Summary
CVE-2025-22954 is a SQL injection vulnerability affecting Koha's C4/Serials.pm module before version 24.11.02. This issue resides in the lateissues-export.pl script and can be exploited by malicious actors through manipulation of the supplierid or serialid parameters, potentially leading to unauthorized access or data modification within the Koha library system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.