CVE-2024-23687: Openlibraryfoundation Mod-Data-Export-Spring

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.

Affected products

• Openlibraryfoundation Mod-Data-Export-Spring: before 1.5.4 (fixed in 1.5.4); from 2.0.0, before 2.0.2 (fixed in 2.0.2)

Published 2024-01-19. Last modified 2026-07-14.