CVE-2024-23687
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2024-01-19
Modified: 2026-11-08
First seen: 2026-11-08
Status: pending_score
Description
Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.
References & Advisories (5)
vendor-advisory
vendor-advisory
third-party-advisory
related
patch