← Back to browse · API

CVE-2024-28739

Severity

CRITICAL

CVSS

9.6

EPSS

0.18921

Risk score

45.02

CISA KEV

No

PoC

No

Published

2024-08-06

Modified

2024-08-06

First seen

2026-08-07

Aliases

EUVD-2024-25828, GHSA-GVHM-XPQG-38JW

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-25828

Description

An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.

References