CVE-2024-28739: Koha

High severity, CVSS 7.2. EPSS: 18.9% chance of exploitation in the next 30 days.

An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.

Affected products

• Koha Koha: up to and including 23.05.00

Published 2024-08-06. Last modified 2026-06-17.