Calibre-Web before 0.6.18 allows user table SQL Injection.
References
Link | Resource |
---|---|
https://github.com/janeczku/calibre-web/blob/master/SECURITY.md | Third Party Advisory |
https://github.com/janeczku/calibre-web/releases/tag/0.6.18 | Release Notes Third Party Advisory |
Configurations
History
No history.
Information
Published : 2022-05-16 02:15
Updated : 2024-02-28 19:09
NVD link : CVE-2022-30765
Mitre link : CVE-2022-30765
CVE.ORG link : CVE-2022-30765
JSON object : View
Products Affected
calibre-web_project
- calibre-web
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')