CVE-2014-1924

CRITICAL · CVSS 9.8 EPSS 2.04%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-01-24 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-1924

Severity

CRITICAL

CVSS

9.8

EPSS

2.04%

Original Filing — NVD Description

The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 does not require authentication, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.