Skip to content
OpenAdvisories

Vendor

crocodilestick

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    crocodilestick Calibre-Web-Automated Admin Endpoint cwa_functions.py missing authentication

    A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component Admin Endpoint. This manipulation causes missing authentication. It is possible t…

  • Medium 6.3

    crocodilestick Calibre-Web-Automated Kobo auth-token Route kobo_auth.py generate_auth_token improper authorization

    A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py of the component Kobo auth-token Route. The manipulation results in improper auth…