What is GHSA-wxr6-29pv-ch68?

GHSA-wxr6-29pv-ch68 is a security advisory published by GitHub Security Advisories with High severity. calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

Which CVE IDs does GHSA-wxr6-29pv-ch68 cover?

GHSA-wxr6-29pv-ch68 covers the following CVE IDs: CVE-2021-4164. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wxr6-29pv-ch68?

GHSA-wxr6-29pv-ch68 has a CVSS v3 base score of 7.6, published by GitHub Security Advisories.

Which products are affected by GHSA-wxr6-29pv-ch68?

GHSA-wxr6-29pv-ch68 affects 1 product, including: pip/calibreweb:\u003c 0.6.15.

GHSA-wxr6-29pv-ch68HighCVSS 7.6

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

Vendor

GitHub Security Advisories

Published

January 21, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2021-4164 →

📋 Description

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

🎯 Affected products1

pip/calibreweb:< 0.6.15

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-4164
https://github.com/janeczku/calibre-web/commit/785726deee13b4d56f6c3503dd57c1e3eb7d6f30
https://huntr.dev/bounties/2debace1-a0f3-45c1-95fa-9d0512680758
https://github.com/advisories/GHSA-wxr6-29pv-ch68