Lucene search
Veracode Vulnerability DatabaseVERACODE:40298HistoryApr 26, 2023 - 1:56 p.m.
Weak Password Requirements
2023-04-2613:56:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
calibreweb
weak password
account takeover
bruteforce
vulnerability
EPSS
0.002
Percentile
61.7%
calibreweb is vulnerable to Weak Password Requirements. The vulnerability exists in the generate_random_password function of helper.py, which allows users to create weak passwords resulting in account takeovers via bruteforce attacks.
Related
osv
osv
Weak Password Requirements in calibreweb
2023-04-15 15:30:14
CVE-2023-2106
2023-04-15 14:15:07
cvelist
cvelist
CVE-2023-2106 Weak Password Requirements in janeczku/calibre-web
2023-04-15 00:00:00
cve
cve
CVE-2023-2106
2023-04-15 14:15:07
github
github
Weak Password Requirements in calibreweb
2023-04-15 15:30:14
huntr
huntr
Weak Password Requirements
2022-06-01 08:06:59
prion
prion
Default credentials
2023-04-15 14:15:00
nvd
nvd
CVE-2023-2106
2023-04-15 14:15:07