I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised.

Published Nov 17, 2017 · Updated Sep 16, 2024 · Assigned by mitre