CVE-2022-0495

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

critical 9.4 CVSS 3.1
Published: Sep 21, 2022
Modified: May 20, 2026
Vendor: Parantezteknoloji
Product: Koha Library Automation

Description

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

References