Lucene search
PRIOn knowledge basePRION:CVE-2021-25965HistoryNov 16, 2021 - 10:15 a.m.
Cross site request forgery (csrf)
2021-11-1610:15:00
PRIOn knowledge base
www.prio-n.com
5
In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them to take over the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| calibre-web | ge | 0.6.0 | |
| calibre-web | le | 0.6.13 |
Related
cnvd
cnvd
Calibre Cross-Site Request Forgery Vulnerability
2021-11-22 00:00:00
cve
cve
CVE-2021-25965
2021-11-16 10:15:06
osv
osv
CVE-2021-25965
2021-11-16 10:15:06
cvelist
cvelist
nvd
nvd
CVE-2021-25965
2021-11-16 10:15:06