CVE-2020-12627

Description

References

• janeczku/calibre-web#1337 · Patch

Mais vulnerabilidades de calibre-web

• CVE-2025-65858BAIXO 3.5A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username'…
• CVE-2025-7404CRÍTICO 9.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows …
• CVE-2021-3988MÉDIO 6.1A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The vulnerability occur…
• CVE-2021-3987MÉDIO 4.3An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without public shelf permissions …
• CVE-2021-3986MÉDIO 4.3A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue …