CVE-2021-25965

Calibre-web (open-source web UI for Calibre) versions 0.6.0–0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can lure an authenticated user to click a malicious link to create a new administrator-facing account and attacker-controlled credentials, enabling takeover of the a...

ImageMagick code issue vulnerability (CNVD-2021-25965)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...