Lucene search

K
huntrAlicaz1117F439-133C-4563-AFB2-6CD80607BD5C
HistoryDec 24, 2021 - 8:02 p.m.

Business Logic Errors in janeczku/calibre-web

2021-12-2420:02:27
alicaz
www.huntr.dev
4

0.002 Low

EPSS

Percentile

55.7%

Description

There is a possibility to create 2 public phasing shelfs that have the same name, which is a business logic error.

Steps To Reproduce

1.	Create a shelf (with empty name)
2.	Tick the share with everyone box
3.	Create another shelf (with empty name) 
4.	Tick the share with everyone box, it will prompt an error, and the shelf will not be created
5.	Untick the share with everyone box and save, the shelf will be created.
6.	Go to the edit shelf properties of the second shelf, and tick the share with everyone box 
7.	Save

And now there are two shelfs with the same name and are public phasing, which is not allowed by the application. However following the steps above can be achieved.

(POC Video)
https://drive.google.com/file/d/1MsDyL7Vezl0jmtkdfbd0uiLcMqS_OqV7/view?usp=sharing 

# Impact
This vulnerability is capable of design bypass, restriction bypass, business logic error and more depending on the application.

video

0.002 Low

EPSS

Percentile

55.7%

Related for 1117F439-133C-4563-AFB2-6CD80607BD5C