Server-Side Request Forgery (SSRF)

calibreweb is vulnerable to server-side request forgery. The vulnerability exists in savecoverfromurl in helper.py because the internal end points are not properly validated which allows an attacker to access the devices running on the same network...

Server-Side Request Forgery (SSRF)

calibreweb is vulnerable to server-side request forgery. The vulnerability exists in the savecoverfromurl function in helper.py because the default redirections have not been addressed, allowing an attacker to bypass the URL redirection validation...