Skip to content
OpenAdvisories

Product · janeczku

Calibre-Web

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization

    A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpoint. Such manipulation of the argument user_id leads to improper authorization. Th…