Back to bug 41593

Who When What Removed Added
shukrulloh70 2026-01-11 21:21:27 UTC Severity enhancement critical
Priority P5 - low P1 - high
shukrulloh70 2026-01-11 21:22:55 UTC Version(s) released in 25.12
dcook 2026-01-11 22:56:12 UTC CC , martin.renvoize, nick, phil, philippe.blouin, tomascohen
Version Main unspecified
Component Architecture, internals, and plumbing Koha
QA Contact testopia
Product Koha Koha security
CC dcook, didier.gautheron, fridolin.somers, jonathan.druart, katrin.fischer, laurent.ducos, lisette, lucas, m.de.rooy
Assignee koha-bugs chris
Group Koha security
dcook 2026-01-11 23:11:18 UTC Sponsorship status Seeking sponsor ---
Version(s) released in 25.12
dcook 2026-01-11 23:11:39 UTC Summary Authenticated SQL Injection in Koha staff interface allows full database compromise Authenticated SQL Injection in staff side suggestions
dcook 2026-01-11 23:42:31 UTC Status NEW Needs Signoff
dcook 2026-01-11 23:43:29 UTC Assignee chris dcook
jonathan.druart 2026-01-12 10:43:52 UTC Status Needs Signoff Signed Off
jonathan.druart 2026-01-12 10:43:54 UTC Attachment #191239 Attachment is obsolete 0 1
lisette 2026-01-16 16:02:16 UTC QA Contact lisette
Status Signed Off Passed QA
lisette 2026-01-16 16:02:18 UTC Attachment #191249 Attachment is obsolete 0 1
lisette 2026-01-16 16:02:21 UTC Attachment #191250 Attachment is obsolete 0 1
lucas 2026-01-20 14:15:10 UTC Status Passed QA Failed QA
jonathan.druart 2026-01-20 14:49:22 UTC Attachment #191576 Attachment is obsolete 0 1
jonathan.druart 2026-01-20 14:49:48 UTC Attachment #191576 Attachment is obsolete 1 0
jonathan.druart 2026-01-20 14:50:02 UTC Attachment #191696 Attachment description Bug 41593: Validate displayby parameter in suggestion.pl [24.11] Bug 41593: Validate displayby parameter in suggestion.pl
jonathan.druart 2026-01-20 14:51:08 UTC Status Failed QA Passed QA
wainuiwitikapark 2026-01-22 23:19:14 UTC CC wainuiwitikapark
lucas 2026-01-29 22:12:44 UTC Version(s) released in 26.05.00,25.11.01,24.11.12
lucas 2026-01-29 22:13:58 UTC Status Passed QA Pushed to oldstable
lucas 2026-01-29 22:14:20 UTC Group Koha security
Component Koha Staff interface
CC gmcharlt
Product Koha security Koha
lucas 2026-01-29 22:24:02 UTC Version(s) released in 26.05.00,25.11.01,24.11.12 26.05.00,25.11.01,25.05.07,24.11.12
shukrulloh70 2026-01-30 03:08:00 UTC Version(s) released in 26.05.00,25.11.01,25.05.07,24.11.12
dcook 2026-01-30 04:01:53 UTC Version(s) released in 26.05.00,25.11.01,25.05.07,24.11.12

Back to bug 41593