CVE-2022-0406 Improper Authorization in janeczku/calibre-web

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0405 Improper Access Control in janeczku/calibre-web

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0405

CVE-2022-0405 affects janeczku/calibre-web versions prior to 0.6.16. Root cause: improper access control during HTML rendering in shelf handling allows an attacker to disclose the names of private shelves. Impact: information disclosure of private shelf names without privilege escalation. A PoC d...

CVE-2022-0405 Improper Access Control in janeczku/calibre-web

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16...

PT-2022-13159 · Unknown · Janeczku/Calibre-Web

Name of the Vulnerable Software and Affected Versions: janeczku/calibre-web versions prior to 0.6.16 Description: The issue is related to improper access control in the janeczku/calibre-web GitHub repository. Recommendations: For versions prior to 0.6.16, update to version 0.6.16 or later to...

calibre-web 安全漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in GitHub janeczku/calibre-web versions prior to 0.6.16, which stems from incorrect authorization...

PT-2022-13160 · Unknown · Janeczku/Calibre-Web

Name of the Vulnerable Software and Affected Versions: janeczku/calibre-web versions prior to 0.6.16 Description: The issue is related to improper authorization in the GitHub repository janeczku/calibre-web. Recommendations: For versions prior to 0.6.16, update to version 0.6.16 or later to resol...

Calibre-Web 访问控制错误漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. An access control error vulnerability exists in Calibre-Web versions prior to 0.6.16...

Calibre-Web Server-Side Cross-Site Request Forgery Vulnerability

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from a server-side cross-site request forgery vulnerability, no detailed vulnerability details are available at this time...

Calibre-Web suffers from a server-side cross-site request forgery vulnerability (CNVD-2022-29585)

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from a server-side cross-site request forgery vulnerability, no detailed vulnerability details are available at this time...

CVE-2022-0767

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

CVE-2022-0766

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

CVE-2022-0766

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

CVE-2022-0767

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

CVE-2022-0766 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

CVE-2022-0766

CVE-2022-0766 describes a Server-Side Request Forgery (SSRF) in the GitHub repository janeczku/calibre-web prior to version 0.6.17. The vulnerability arises from an incomplete fix for a prior issue, allowing an attacker to induce the vulnerable service to make requests to internal or external res...

CVE-2022-0766 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

CVE-2022-0767 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

CVE-2022-0767

The CVE-2022-0767 entry describes a Server-Side Request Forgery (SSRF) in janeczku/calibre-web, prior to version 0.6.17. Connected sources indicate the root cause is incomplete SSRF protection that can be bypassed via HTTP redirects to internal endpoints (e.g., localhost); some analyses also note...