CyberSecBulletin

Openlibraryfoundation vulnerabilities

We track 2 vulnerabilities in Openlibraryfoundation products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2024.

2vulnerabilities
2critical
0high
0exploited
9.1average CVSS score

Latest Openlibraryfoundation vulnerabilities

  • 9.1 Critical severity

    vufind: Server-Side Request Forgery

    CVE-2024-25738Openlibraryfoundation

    A Server-Side Request Forgery (SSRF) vulnerability in the /Upgrade/FixConfig route in Open Library Foundation VuFind 2.0 through 9.1 before 9.1.1 allows a remote attacker to overwrite local configuration files to gain access to the administrator panel and achi

  • 9.1 Critical severity

    Mod-data-export-spring: Use of Hard-coded Credentials

    CVE-2024-23687Openlibraryfoundation

    Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.