Server-Side Request Forgery (SSRF)

calibreweb is vulnerable to server-side request forgery. The vulnerability exists in the savecoverfromurl function in helper.py because the default redirections have not been addressed, allowing an attacker to bypass the URL redirection validation...