Calibre-web Security Vulnerabilities and Issues — Calibre-web CVE List

Lucene search

JaneczkuCalibre-web

3 matches found

CVE•added 2022/01/28 10:15 p.m.•64 views

CVE-2022-0352

Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

8.5CVSS6.1AI score0.00318EPSS

CVE•added 2022/01/17 1:15 p.m.•60 views

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

8.8CVSS8.2AI score0.00134EPSS

CVE•added 2021/11/16 10:15 a.m.•24 views

CVE-2021-25965

In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them to take over the application.

8.8CVSS8.7AI score0.00158EPSS