High · 7.7 CVE-2025-30076 EUVD-2025-6654GHSA-qjpp-vw6x-4722

Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.

Published Mar 16, 2025 · Updated Mar 17, 2025 · Assigned by mitre

Description

Vendor	Product	Affected	Fixed
Koha	Koha	< 22.11.24, 23 – < 23.11.12, 24 – < 24.05.07, 24.06 – < 24.11.02	22.11.24