What is GHSA-wrp6-9w7f-3wxg?

GHSA-wrp6-9w7f-3wxg is a security advisory published by GitHub Security Advisories with Medium severity. calibre-web is vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-wrp6-9w7f-3wxg cover?

GHSA-wrp6-9w7f-3wxg covers the following CVE IDs: CVE-2021-4170. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wrp6-9w7f-3wxg?

GHSA-wrp6-9w7f-3wxg has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-wrp6-9w7f-3wxg?

GHSA-wrp6-9w7f-3wxg affects 1 product, including: pip/calibreweb:\u003c 0.6.15.

GHSA-wrp6-9w7f-3wxgMediumCVSS 5.4

calibre-web is vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

January 21, 2022

Last Modified

November 19, 2024

🔗 CVE IDs covered (1)

CVE-2021-4170 →

📋 Description

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

🎯 Affected products1

pip/calibreweb:< 0.6.15

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-4170
https://github.com/janeczku/calibre-web/commit/7ad419dc8c12180e842a82118f4866ac3d074bc5
https://huntr.dev/bounties/ff395101-e392-401d-ab4f-579c63fbf6a0
https://github.com/advisories/GHSA-wrp6-9w7f-3wxg