Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key.

Published May 4, 2020 · Updated Aug 4, 2024 · Assigned by mitre