CVE-2022-0495

Critical

Published: 21/09/2022(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The library automation system KOHA, developed by Parantez Teknoloji, before version 19.05.03 had an unauthenticated SQL Injection vulnerability. This issue has been fixed in version 19.05.03.01.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, posing a serious threat to the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to upgrade the KOHA system to version 19.05.03.01 or later to mitigate this vulnerability.

Original NVD description (English source)

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.