Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35576
HistoryMay 17, 2022 - 11:50 a.m.

SQL Injection

2022-05-1711:50:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

0.002 Low

EPSS

Percentile

55.3%

calibreweb is vulnerable to sql injection. The vulnerability exists in move_header_elements function in table.js entries of user table are visible which allows an attacker to inject malicious sql queries.

CPENameOperatorVersion
calibrewebeq0.6.12
calibrewebeq0.6.12

0.002 Low

EPSS

Percentile

55.3%

Related for VERACODE:35576