A vulnerability has been found in Koha Library up to 23.05.9 and classified as critical. Affected is an unknown function of the file /cgi-bin/koha/opac-sendbasket.pl of the component POST Parameter Handler. Performing a manipulation of the argument bib_list results in sql injection.
This vulnerability is reported as CVE-2024-36058. The attack is possible to be carried out remotely. No exploit exists.
The affected component should be upgraded.
