CVE-2025-22954

CVSS 3.1 Score 10 of 10 (high)

Details

Published Mar 12, 2025
Updated: Mar 18, 2025
CWE ID 89

Summary

CVE-2025-22954 is a SQL injection vulnerability affecting Koha's C4/Serials.pm module before version 24.11.02. This issue resides in the lateissues-export.pl script and can be exploited by malicious actors through manipulation of the supplierid or serialid parameters, potentially leading to unauthorized access or data modification within the Koha library system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share