What is GHSA-h56g-v4vp-q9q6?

GHSA-h56g-v4vp-q9q6 is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Scripting in calibreweb

Which CVE IDs does GHSA-h56g-v4vp-q9q6 cover?

GHSA-h56g-v4vp-q9q6 covers the following CVE IDs: CVE-2022-0352. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h56g-v4vp-q9q6?

GHSA-h56g-v4vp-q9q6 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-h56g-v4vp-q9q6?

GHSA-h56g-v4vp-q9q6 affects 1 product, including: pip/calibreweb:\u003c 0.6.16.

GHSA-h56g-v4vp-q9q6MediumCVSS 6.1

Cross-site Scripting in calibreweb

Vendor

GitHub Security Advisories

Published

January 29, 2022

Last Modified

September 13, 2024

🔗 CVE IDs covered (1)

CVE-2022-0352 →

📋 Description

calibreweb prior to version 0.6.16 contains a cross-site scripting vulnerability.

🎯 Affected products1

pip/calibreweb:< 0.6.16

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-0352
https://github.com/janeczku/calibre-web/commit/6bf07539788004513c3692c074ebc7ba4ce005e1
https://huntr.dev/bounties/a577ff17-2ded-4c41-84ae-6ac02440f717
https://github.com/pypa/advisory-database/tree/main/vulns/calibreweb/PYSEC-2022-18.yaml
https://github.com/advisories/GHSA-h56g-v4vp-q9q6