Calibre-web Security Vulnerabilities and Issues — Calibre-web CVE List

Lucene search

JaneczkuCalibre-web

3 matches found

CVE•added 2022/04/03 7:15 p.m.•78 views

CVE-2022-0406

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.

4.3CVSS4.6AI score0.00127EPSS

CVE•added 2022/04/03 7:15 p.m.•70 views

CVE-2022-0405

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.

4.3CVSS4.6AI score0.00124EPSS

CVE•added 2024/11/15 11:15 a.m.•40 views

CVE-2021-3986

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they do ...

4.3CVSS4.2AI score0.00053EPSS