Authorization Bypass

calibreweb is vulnerable to authorization bypass. The vulnerability exists in createeditshelf function in shelf.py because the server doesn't properly validate the user permissions which allows an attacker to create and modify public and private shelves...