CVE-2018-1000141: Scilico I, Librarian

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access (read, write and delete) to project discussions.

Affected products

• Scilico I, Librarian: up to and including 4.9

Published 2018-03-23. Last modified 2026-06-17.