Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-25965
8.8
HIGHCVSS v3
Severity scale
010
Description
In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them to take over the application.
janeczku/calibre-web
GitHub:books: Web app for browsing, reading and downloading eBooks stored in a Calibre database
GitHub:books: Web app for browsing, reading and downloading eBooks stored in a Calibre database= *, >= 0.6.0, <= 0.6.13NVD
linuxserver/calibre-web
Docker HubA Calibre-Web container, brought to you by LinuxServer.io.
Docker HubA Calibre-Web container, brought to you by LinuxServer.io.= *, >= 0.6.0, <= 0.6.13NVD