Back to bug 41593
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| shukrulloh70 | 2026-01-11 21:21:27 UTC | Severity | enhancement | critical |
| Priority | P5 - low | P1 - high | ||
| shukrulloh70 | 2026-01-11 21:22:55 UTC | Version(s) released in | 25.12 | |
| dcook | 2026-01-11 22:56:12 UTC | CC | , martin.renvoize, nick, phil, philippe.blouin, tomascohen | |
| Version | Main | unspecified | ||
| Component | Architecture, internals, and plumbing | Koha | ||
| QA Contact | testopia | |||
| Product | Koha | Koha security | ||
| CC | dcook, didier.gautheron, fridolin.somers, jonathan.druart, katrin.fischer, laurent.ducos, lisette, lucas, m.de.rooy | |||
| Assignee | koha-bugs | chris | ||
| Group | Koha security | |||
| dcook | 2026-01-11 23:11:18 UTC | Sponsorship status | Seeking sponsor | --- |
| Version(s) released in | 25.12 | |||
| dcook | 2026-01-11 23:11:39 UTC | Summary | Authenticated SQL Injection in Koha staff interface allows full database compromise | Authenticated SQL Injection in staff side suggestions |
| dcook | 2026-01-11 23:42:31 UTC | Status | NEW | Needs Signoff |
| dcook | 2026-01-11 23:43:29 UTC | Assignee | chris | dcook |
| jonathan.druart | 2026-01-12 10:43:52 UTC | Status | Needs Signoff | Signed Off |
| jonathan.druart | 2026-01-12 10:43:54 UTC | Attachment #191239 Attachment is obsolete | 0 | 1 |
| lisette | 2026-01-16 16:02:16 UTC | QA Contact | lisette | |
| Status | Signed Off | Passed QA | ||
| lisette | 2026-01-16 16:02:18 UTC | Attachment #191249 Attachment is obsolete | 0 | 1 |
| lisette | 2026-01-16 16:02:21 UTC | Attachment #191250 Attachment is obsolete | 0 | 1 |
| lucas | 2026-01-20 14:15:10 UTC | Status | Passed QA | Failed QA |
| jonathan.druart | 2026-01-20 14:49:22 UTC | Attachment #191576 Attachment is obsolete | 0 | 1 |
| jonathan.druart | 2026-01-20 14:49:48 UTC | Attachment #191576 Attachment is obsolete | 1 | 0 |
| jonathan.druart | 2026-01-20 14:50:02 UTC | Attachment #191696 Attachment description | Bug 41593: Validate displayby parameter in suggestion.pl | [24.11] Bug 41593: Validate displayby parameter in suggestion.pl |
| jonathan.druart | 2026-01-20 14:51:08 UTC | Status | Failed QA | Passed QA |
| wainuiwitikapark | 2026-01-22 23:19:14 UTC | CC | wainuiwitikapark | |
| lucas | 2026-01-29 22:12:44 UTC | Version(s) released in | 26.05.00,25.11.01,24.11.12 | |
| lucas | 2026-01-29 22:13:58 UTC | Status | Passed QA | Pushed to oldstable |
| lucas | 2026-01-29 22:14:20 UTC | Group | Koha security | |
| Component | Koha | Staff interface | ||
| CC | gmcharlt | |||
| Product | Koha security | Koha | ||
| lucas | 2026-01-29 22:24:02 UTC | Version(s) released in | 26.05.00,25.11.01,24.11.12 | 26.05.00,25.11.01,25.05.07,24.11.12 |
| shukrulloh70 | 2026-01-30 03:08:00 UTC | Version(s) released in | 26.05.00,25.11.01,25.05.07,24.11.12 | |
| dcook | 2026-01-30 04:01:53 UTC | Version(s) released in | 26.05.00,25.11.01,25.05.07,24.11.12 |
Back to bug 41593