GitHub Advisoryadvisory · PyPI

GHSA-mhmp-m6g7-7c24 Weak Password Requirements in calibreweb

HIGH Published 2023-04-15 Modified 2023-04-26 Official page ↗

Aliases: CVE-2023-2106
Ecosystem: PyPI
Packages: calibreweb
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses: CWE-521
Reviewed: 2023-04-26

Affected packages

• PyPI calibreweb: < 0.6.20 → fixed in 0.6.20

Description

Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20.

Related

Alias · CVE (1)

CVE-2023-2106 Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20. vulnerability

Weakness · CWE (1)

CWE-521 Weak Password Requirements weakness

References