GHSA-XP7P-3GX7-J6WX calibre-web is vulnerable to Business Logic Errors

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4164 Cross-Site Request Forgery (CSRF) in janeczku/calibre-web

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

Code injection

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171

Calibre-web (web application) is affected by CVE-2021-4171 due to Business Logic Errors. The CVSS data indicates high to critical impact (C/H/I/A) with network access, no authentication, and no user interaction required. The vulnerability affects core logic of calibre-web (exact function/file not...

CVE-2021-4171 Business Logic Errors in janeczku/calibre-web

calibre-web is vulnerable to Business Logic Errors...

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

Description There is a reflected XSS vulnerability on the site calibre-web. Proof of Concept 1. go to the calibre e-book management 2. create a new book give the title name 3. and give the title sort name 4. save and go to the website 5.go to Author 6.press one of the books 7. then right click an...

calibre-web 安全漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in calibre-web that stems from the fact that calibre-web is prone to business logic errors...

PT-2022-11465

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Business Logic Errors. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

PT-2022-11450

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...

CVE-2021-4171: Undefined Security Weakness

calibre-web is vulnerable to Business Logic Errors...

Calibre-Web Cross-Site Scripting Vulnerability (CNVD-2022-21489)

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database.A vulnerability exists in Calibre-Web cross-site scripting that is vulnerable to incorrect neutralization of input during web page generation. No details of the vulnerability are currently...