Server-Side Request Forgery in calibreweb

CRÍTICO 9.8CVE-2022-0339 · GHSA-4w8p-x6g8-fv64 · PYSEC-2022-23 · Published 30/01/2022 · updated 17/06/2026

En resumen

CVE-2022-0339 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a calibreweb, calibre-web (janeczku).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.96%, mayor que el 61.6% de las vulnerabilidades.
Solución: actualizar a 0.6.16 o posterior.

Package	Affected versions	Patched versions
calibreweb PyPI	`< 0.6.16`	`0.6.16`
calibre-web janeczku	`< 0.6.16`	`0.6.16`

calibreweb prior to version 0.6.16 contains a Server-Side Request Forgery (SSRF) vulnerability.

NVD description

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.6.16

0.6.16

< 0.6.16

0.6.16

Más vulnerabilidades de calibreweb

Ver todo →