CVE-2022-0767

The CVE-2022-0767 entry describes a Server-Side Request Forgery (SSRF) in janeczku/calibre-web, prior to version 0.6.17. Connected sources indicate the root cause is incomplete SSRF protection that can be bypassed via HTTP redirects to internal endpoints (e.g., localhost); some analyses also note...

PT-2022-13423

Name of the Vulnerable Software and Affected Versions calibre-web versions prior to 0.6.17 Description The issue is related to Server-Side Request Forgery SSRF due to incomplete protection that can be bypassed via an HTTP redirect. An HTTP server set up to respond with a 302 redirect may redirect...

PT-2022-13422

Name of the Vulnerable Software and Affected Versions calibre-web versions prior to 0.6.17 Description The issue is related to Server-Side Request Forgery SSRF in the GitHub repository janeczku/calibre-web. This is due to an incomplete fix, which results in the blacklist not checking for 0.0.0.0,...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from a server-side cross-site request forgery vulnerability, no detailed vulnerability details are available at this time...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from a server-side cross-site request forgery vulnerability, no detailed vulnerability details are available at this time...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from a code issue vulnerability that stems from server-side request forgery SSRF in Pypi calibreweb before 0.6.16...

Calibre-Web 访问控制错误漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from an access control error vulnerability that stems from improper access control in Pypi calibreweb prior to 0.6.16...

CVE-2022-0352 Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...

Calibre-Web 跨站脚本漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in Calibre-Web before 0.6.16, which stems from the WEB application's lack of proper validation of client-side data. An attacker could exploit the vulnerability ...

Improper Authorization in janeczku/calibre-web

Description With default settings, low-level users will not have permission to edit the sort order of books in private shelf of another user. However, due to incorrect checking, the application does not work as intended. Proof of Concept - Step 1: Login with admin account and go to...

calibre-web is vulnerable to Cross-site Scripting

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

GHSA-WRP6-9W7F-3WXG calibre-web is vulnerable to Cross-site Scripting

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

GHSA-WXR6-29PV-CH68 calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

calibre-web is vulnerable to Business Logic Errors

calibre-web is vulnerable to Business Logic Errors...

GHSA-XP7P-3GX7-J6WX calibre-web is vulnerable to Business Logic Errors

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...