Skip to content
OpenAdvisories

Product · Calibre Web

calibreweb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-25965

    Calibre-web - Admin Account Takeover via Cross-Site Request Forgery (CSRF)

    In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them t…

    Calibre Web calibreweb