CVE-2023-5025

Name of the Vulnerable Software and Affected Versions Koha versions up to 23.05.03

Description A problem has been identified that affects the MARC component, specifically the /cgi-bin/koha/catalogue/search.pl file. This issue can lead to cross-site scripting and can be initiated remotely.

Recommendations For versions up to 23.05.03, consider restricting access to the /cgi-bin/koha/catalogue/search.pl file until a patch is available. As a temporary workaround, consider disabling the affected component of the MARC file to minimize the risk of exploitation.