GitHub Advisoryadvisory · PyPI

GHSA-4w8p-x6g8-fv64 Server-Side Request Forgery in calibreweb

MEDIUM Published 2022-02-01 Modified 2024-11-19 Official page ↗
Aliases
CVE-2022-0339
Ecosystem
PyPI
Packages
calibreweb
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-918
Reviewed
2022-01-31

Affected packages

• PyPI calibreweb: < 0.6.16 → fixed in 0.6.16

Description

calibreweb prior to version 0.6.16 contains a Server-Side Request Forgery (SSRF) vulnerability.

Related

Alias · CVE (1)

  • CVE-2022-0339 Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16. vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References