Back to bug 41593
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| shukrulloh70 | 2026-01-11 21:21:27 UTC | Priority | P5 - low | P1 - high |
| Severity | enhancement | critical | ||
| shukrulloh70 | 2026-01-11 21:22:55 UTC | Version(s) released in | 25.12 | |
| dcook | 2026-01-11 22:56:12 UTC | QA Contact | testopia | |
| Product | Koha | Koha security | ||
| CC | dcook, didier.gautheron, fridolin.somers, jonathan.druart, katrin.fischer, laurent.ducos, lisette, lucas, m.de.rooy | |||
| Assignee | koha-bugs | chris | ||
| Group | Koha security | |||
| CC | , martin.renvoize, nick, phil, philippe.blouin, tomascohen | |||
| Version | Main | unspecified | ||
| Component | Architecture, internals, and plumbing | Koha | ||
| dcook | 2026-01-11 23:11:18 UTC | Version(s) released in | 25.12 | |
| Sponsorship status | Seeking sponsor | --- | ||
| dcook | 2026-01-11 23:11:39 UTC | Summary | Authenticated SQL Injection in Koha staff interface allows full database compromise | Authenticated SQL Injection in staff side suggestions |
| dcook | 2026-01-11 23:42:31 UTC | Status | NEW | Needs Signoff |
| dcook | 2026-01-11 23:43:29 UTC | Assignee | chris | dcook |
| jonathan.druart | 2026-01-12 10:43:52 UTC | Status | Needs Signoff | Signed Off |
| jonathan.druart | 2026-01-12 10:43:54 UTC | Attachment #191239 Attachment is obsolete | 0 | 1 |
| lisette | 2026-01-16 16:02:16 UTC | Status | Signed Off | Passed QA |
| QA Contact | lisette | |||
| lisette | 2026-01-16 16:02:18 UTC | Attachment #191249 Attachment is obsolete | 0 | 1 |
| lisette | 2026-01-16 16:02:21 UTC | Attachment #191250 Attachment is obsolete | 0 | 1 |
| lucas | 2026-01-20 14:15:10 UTC | Status | Passed QA | Failed QA |
| jonathan.druart | 2026-01-20 14:49:22 UTC | Attachment #191576 Attachment is obsolete | 0 | 1 |
| jonathan.druart | 2026-01-20 14:49:48 UTC | Attachment #191576 Attachment is obsolete | 1 | 0 |
| jonathan.druart | 2026-01-20 14:50:02 UTC | Attachment #191696 Attachment description | Bug 41593: Validate displayby parameter in suggestion.pl | [24.11] Bug 41593: Validate displayby parameter in suggestion.pl |
| jonathan.druart | 2026-01-20 14:51:08 UTC | Status | Failed QA | Passed QA |
| wainuiwitikapark | 2026-01-22 23:19:14 UTC | CC | wainuiwitikapark | |
| lucas | 2026-01-29 22:12:44 UTC | Version(s) released in | 26.05.00,25.11.01,24.11.12 | |
| lucas | 2026-01-29 22:13:58 UTC | Status | Passed QA | Pushed to oldstable |
| lucas | 2026-01-29 22:14:20 UTC | Component | Koha | Staff interface |
| CC | gmcharlt | |||
| Product | Koha security | Koha | ||
| Group | Koha security | |||
| lucas | 2026-01-29 22:24:02 UTC | Version(s) released in | 26.05.00,25.11.01,24.11.12 | 26.05.00,25.11.01,25.05.07,24.11.12 |
| shukrulloh70 | 2026-01-30 03:08:00 UTC | Version(s) released in | 26.05.00,25.11.01,25.05.07,24.11.12 | |
| dcook | 2026-01-30 04:01:53 UTC | Version(s) released in | 26.05.00,25.11.01,25.05.07,24.11.12 | |
| wainuiwitikapark | 2026-02-24 04:51:23 UTC | Status | Pushed to oldstable | Needs documenting |
| shukrulloh70 | 2026-03-04 14:51:14 UTC | Alias | Mothra | |
| dcook | 2026-03-04 23:10:19 UTC | Alias | Mothra | |
| shukrulloh70 | 2026-03-05 18:56:13 UTC | Alias | Mothra | |
| dcook | 2026-03-05 22:49:57 UTC | Alias | Mothra |
Back to bug 41593