PT-2022-16156

Name of the Vulnerable Software and Affected Versions BookWyrm versions prior to 0.3.0 Description The functionality to load a cover via URL in BookWyrm is vulnerable to a server-side request forgery attack. This issue can be exploited by a logged-in user. As a workaround, BookWyrm instances can...