Privilege Escalation

calibreweb is vulnerable to privilege escalation. The vulnerability exists due to the lack of permission checks in the createeditshelf function of shelf.py, allowing an attacker to create a public shelf without having permission...

GHSA-VGMW-9CWW-QQ99 Incorrect Authorization in calibreweb

calibreweb prior to version 0.6.16 contains an Incorrect Authorization vulnerability...

Incorrect Authorization in calibreweb

calibreweb prior to version 0.6.16 contains an Incorrect Authorization vulnerability...

CVE-2022-0339

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0273

Improper Access Control in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0273

Improper Access Control in Pypi calibreweb prior to 0.6.16...

PYSEC-2022-23

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

Improper access control

Improper Access Control in Pypi calibreweb prior to 0.6.16...

PYSEC-2022-23

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

PYSEC-2022-22

Improper Access Control in Pypi calibreweb prior to 0.6.16...

PYSEC-2022-22

Improper Access Control in Pypi calibreweb prior to 0.6.16...

CVE-2022-0273

The CVE-2022-0273 entry describes an improper access control /authorization issue in the Calibre-Web project (calibreweb) before version 0.6.16. Multiple connected sources (GHSA, OSV, OSV-DEV, CVE mirrors) align on the same vulnerability: unauthenticated or insufficiently authenticated actors may...

CVE-2022-0273 Improper Access Control in janeczku/calibre-web

Improper Access Control in Pypi calibreweb prior to 0.6.16...

CVE-2022-0273 Improper Access Control in janeczku/calibre-web

Improper Access Control in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339

CVE-2022-0339 is a Server-Side Request Forgery (SSRF) flaw affecting calibreweb. The connected sources indicate calibreweb prior to version 0.6.16 is vulnerable, with references noting an incomplete fix for the CVE and a blacklist weakness (0.0.0.0) that could resolve to localhost. Several adviso...

PT-2022-13115 · Unknown · Calibre-Web

Name of the Vulnerable Software and Affected Versions: calibreweb versions prior to 0.6.16 Description: The issue is related to a Server-Side Request Forgery SSRF in calibreweb. This allows an attacker to forge requests from the server to other services. No information is provided about the...