Maven package
org.folio/mod-data-export-spring
pkg:maven/org.folio/mod-data-export-spring
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-23687 | — | >= 2.0.0, < 2.0.2 | 2.0.2 | Jan 19, 2024 | Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines. |
- CVE-2024-23687Jan 19, 2024affected >= 2.0.0, < 2.0.2fixed 2.0.2
Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.