6 matches found
CVE-2022-0339
Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.
CVE-2021-4170
calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0352
Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors
CVE-2022-0273
Improper Access Control in Pypi calibreweb prior to 0.6.16.
CVE-2021-4164
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)