Improper Access Control in Pypi calibreweb prior to 0.6.16.
References
Link | Resource |
---|---|
https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf | Patch Third Party Advisory |
https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13 | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
History
14 Feb 2022, 12:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-284 |
04 Feb 2022, 18:03
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-863 | |
First Time |
Calibre-web Project calibre-web
Calibre-web Project |
|
CPE | cpe:2.3:a:calibre-web_project:calibre-web:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 6.5 |
References | (MISC) https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf - Patch, Third Party Advisory | |
References | (CONFIRM) https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13 - Exploit, Issue Tracking, Patch, Third Party Advisory |
30 Jan 2022, 15:15
Type | Values Removed | Values Added |
---|---|---|
CWE |
30 Jan 2022, 14:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-01-30 14:15
Updated : 2023-12-10 14:09
NVD link : CVE-2022-0273
Mitre link : CVE-2022-0273
CVE.ORG link : CVE-2022-0273
JSON object : View
Products Affected
calibre-web_project
- calibre-web