← Back

Openlibraryfoundation

openlibraryfoundation

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Mod Remote Storage
mod-remote-storage
1 CVE
Mod Data Export Spring
mod-data-export-spring
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-23687
1Openlibraryfoundation
1Mod Data Export Spring
Jul 14, 2026
Jan 19, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on,...Show more
Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.Show less
CVE-2024-23685
1Openlibraryfoundation
1Mod Remote Storage
Jul 14, 2026
Jan 19, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-t...Show more
Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.Show less