CVE-2022-0273 Improper Access Control in janeczku/calibre-web

Improper Access Control in Pypi calibreweb prior to 0.6.16...

CVE-2022-0273

The CVE-2022-0273 entry describes an improper access control /authorization issue in the Calibre-Web project (calibreweb) before version 0.6.16. Multiple connected sources (GHSA, OSV, OSV-DEV, CVE mirrors) align on the same vulnerability: unauthenticated or insufficiently authenticated actors may...

CVE-2022-0339 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339

CVE-2022-0339 is a Server-Side Request Forgery (SSRF) flaw affecting calibreweb. The connected sources indicate calibreweb prior to version 0.6.16 is vulnerable, with references noting an incomplete fix for the CVE and a blacklist weakness (0.0.0.0) that could resolve to localhost. Several adviso...

CVE-2022-0339

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

PT-2022-13087 · Unknown · Calibre-Web

Name of the Vulnerable Software and Affected Versions: calibreweb versions prior to 0.6.16 Description: The issue is related to improper access control in calibreweb. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents wher...

PT-2022-13115 · Unknown · Calibre-Web

Name of the Vulnerable Software and Affected Versions: calibreweb versions prior to 0.6.16 Description: The issue is related to a Server-Side Request Forgery SSRF in calibreweb. This allows an attacker to forge requests from the server to other services. No information is provided about the...

Calibre-Web 访问控制错误漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from an access control error vulnerability that stems from improper access control in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0273: Improper Access Control

Improper Access Control in Pypi calibreweb prior to 0.6.16...

Cross-site Scripting in calibreweb

calibreweb prior to version 0.6.16 contains a cross-site scripting vulnerability...

GHSA-H56G-V4VP-Q9Q6 Cross-site Scripting in calibreweb

calibreweb prior to version 0.6.16 contains a cross-site scripting vulnerability...

CVE-2022-0352

Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...

CVE-2022-0352

Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...

PYSEC-2022-18

Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...

Cross site scripting

Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...

PYSEC-2022-18

Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...

CVE-2022-0352 Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...

CVE-2022-0352

CVE-2022-0352 is a reflected cross-site scripting (XSS) vulnerability in calibreweb (janeczku/calibre-web) distributed on PyPI, affecting versions prior to 0.6.16. The issue is documented across multiple sources (GHSA-H56G-V4VP-Q9Q6, OSV, NVD, CVE records), with exploitation publicly disclosed as...