84 matches found
GHSA-H65G-JFQG-2W6M Server-Side Request Forgery in calibreweb
calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery SSRF. This is a result of incomplete SSRF protection that can be bypassed via an HTTP redirect. An HTTP server set up to respond with a 302 redirect may redirect a request to localhost...
Server-Side Request Forgery in calibreweb
calibreweb prior to version 0.6.16 contains a Server-Side Request Forgery SSRF vulnerability...
GHSA-4W8P-X6G8-FV64 Server-Side Request Forgery in calibreweb
calibreweb prior to version 0.6.16 contains a Server-Side Request Forgery SSRF vulnerability...
Server-Side Request Forgery (SSRF)
calibreweb is vulnerable to server-side request forgery. The vulnerability exists in deleteuser function of admin.py due to lack of validation which allows an attacker to fetch localhost URL and upload a book cover...
Cross-site Scripting (XSS)
calibreweb is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to improper sanitize input strings allowing attackers to steal cookies and inject arbitrary code into the victim's web browser...
Privilege Escalation
calibreweb is vulnerable to privilege escalation. The vulnerability exists due to the lack of permission checks in the createeditshelf function of shelf.py, allowing an attacker to create a public shelf without having permission...
Incorrect Authorization in calibreweb
calibreweb prior to version 0.6.16 contains an Incorrect Authorization vulnerability...
GHSA-VGMW-9CWW-QQ99 Incorrect Authorization in calibreweb
calibreweb prior to version 0.6.16 contains an Incorrect Authorization vulnerability...
CVE-2022-0273
Improper Access Control in Pypi calibreweb prior to 0.6.16...
CVE-2022-0339
Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...
CVE-2022-0273
Improper Access Control in Pypi calibreweb prior to 0.6.16...
CVE-2022-0339
Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...
PYSEC-2022-23
Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...
PYSEC-2022-22
Improper Access Control in Pypi calibreweb prior to 0.6.16...
Improper access control
Improper Access Control in Pypi calibreweb prior to 0.6.16...
PYSEC-2022-23
Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...
PYSEC-2022-22
Improper Access Control in Pypi calibreweb prior to 0.6.16...
