2025-03-16 00:00:00
mitre
PUBLISHED
Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.