Known vulnerabilities in calibreweb

Vendor: Jan B
Software: calibreweb
Software CPE: cpe:2.3:a:jan_b:calibreweb:*:*:*:*:*:*:*:*
Website: https://github.com/janeczku
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting calibreweb calibreweb is affected by 8 known vulnerabilities: 1 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61920 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 0.6.18 06.04.2022 SB2022040607
#VU61919 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 0.6.18 06.04.2022 SB2022040607
#VU61918 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 0.6.18 06.04.2022 SB2022040607
#VU61048 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 0.6.17 07.03.2022 SB2022030707
#VU61047 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 0.6.17 07.03.2022 SB2022030707
#VU57851 - Improper Control of Generation of Code ('Code Injection')
 CWE-94 Low
No
No
 0.6.14 02.11.2021 SB2021110214
#VU57850 - Cross-Site Request Forgery (CSRF)
 CWE-352 Medium
No
No
 0.6.14 02.11.2021 SB2021110214
#VU57204 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-25964		 CWE-79 Low
No
No
 0.6.13 11.10.2021 SB2021101109