calibre-web is vulnerable to Business Logic Errors

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-4171 · ADVISORY
• janeczku/calibre-web commit 3e0d876 · WEB
• janeczku/calibre-web · PACKAGE
• pypa/advisory-database · WEB
• huntr.dev/bounties/1117f439-133c-4563-afb2-6cd80607bd5c · WEB
• pypi.org/project/calibreweb · WEB
• GitHub Advisory GHSA-xp7p-3gx7-j6wx · ADVISORY

Lỗ hổng khác của calibreweb

• CVE-2025-65858THẤP 3.5A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username'…
• CVE-2025-7404NGHIÊM TRỌNG 9.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows …
• CVE-2025-6998CAO 8.7ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to caus…
• CVE-2021-3988TRUNG BÌNH 6.1A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The vulnerability occur…
• CVE-2021-3987TRUNG BÌNH 4.3An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without public shelf permissions …