CVE-2022-0495

—

CVSS 3.1

9.4 critical

EPSS

<1%p50

Published

Sep 21, 2022 (Sep 21, 2022)

Modified

Jun 17, 2026

Description

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

Vendors: parantezteknoloji
Products: koha library automation
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.