CVE-2022-30765

Calibre-Web before 0.6.18 allows user table SQL Injection.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-05-16

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Calibre-web (Janeczku)

References

• https://github.com/janeczku/calibre-web/blob/master/SECURITY.md
• https://github.com/janeczku/calibre-web/releases/tag/0.6.18