Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-12627
9.8
CRITICALCVSS v3
Published
May 4, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key.
janeczku/calibre-web
GitHub:books: Web app for browsing, reading and downloading eBooks stored in a Calibre database
GitHub:books: Web app for browsing, reading and downloading eBooks stored in a Calibre database= 0.6.6NVD