CVE-2022-0939 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...

CVE-2022-0939

CVE-2022-0939 affects Calibre-Web (janeczku/calibre-web) before 0.6.18. It is a Server-Side Request Forgery (SSRF) vulnerability, with multiple sources confirming an SSRF issue in this project prior to 0.6.18. Reported impacts include the ability for an attacker to induce the server to fetch reso...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A code issue vulnerability exists in Calibre-Web 0.6.18, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

PT-2022-13540 · Unknown · Calibre-Web

Name of the Vulnerable Software and Affected Versions: calibre-web versions prior to 0.6.18 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository janeczku/calibre-web. SSRF is a type of attack where an attacker can trick a server into making requests to...

PT-2022-13575 · Unknown · Calibre-Web

Name of the Vulnerable Software and Affected Versions: calibre-web versions prior to 0.6.18 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository janeczku/calibre-web. SSRF is a type of attack where an attacker can trick a server into making requests to...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A code issue vulnerability exists in Calibre-Web versions prior to 0.6.18. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's...

CVE-2022-0406

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0405

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0406

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16...

Authorization

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0406 Improper Authorization in janeczku/calibre-web

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0406 Improper Authorization in janeczku/calibre-web

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0406

CVE-2022-0406 affects janeczku/calibre-web (Calibre-Web) prior to 0.6.16, with an improper authorization flaw in shelf order handling. The root cause cited: shelf.py order_shelf path does not verify user permissions before processing POST data, allowing low-privilege users to edit the sort order ...

CVE-2022-0405 Improper Access Control in janeczku/calibre-web

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0405 Improper Access Control in janeczku/calibre-web

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0405

CVE-2022-0405 affects janeczku/calibre-web versions prior to 0.6.16. Root cause: improper access control during HTML rendering in shelf handling allows an attacker to disclose the names of private shelves. Impact: information disclosure of private shelf names without privilege escalation. A PoC d...

PT-2022-13159 · Unknown · Janeczku/Calibre-Web

Name of the Vulnerable Software and Affected Versions: janeczku/calibre-web versions prior to 0.6.16 Description: The issue is related to improper access control in the janeczku/calibre-web GitHub repository. Recommendations: For versions prior to 0.6.16, update to version 0.6.16 or later to...

calibre-web 安全漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in GitHub janeczku/calibre-web versions prior to 0.6.16, which stems from incorrect authorization...

PT-2022-13160 · Unknown · Janeczku/Calibre-Web

Name of the Vulnerable Software and Affected Versions: janeczku/calibre-web versions prior to 0.6.16 Description: The issue is related to improper authorization in the GitHub repository janeczku/calibre-web. Recommendations: For versions prior to 0.6.16, update to version 0.6.16 or later to resol...

Calibre-Web 访问控制错误漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. An access control error vulnerability exists in Calibre-Web versions prior to 0.6.16...