CVE-2022-0273

Improper Access Control in Pypi calibreweb prior to 0.6.16.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@huntr.dev

Published

2022-01-30

Last modified

2024-08-02

Weaknesses

CWE-284, CWE-863

Affected products

• Calibre-web (Janeczku)
• Janeczkucalibre-web (Janeczku)

References

• https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf
• https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13