janeczku/calibre-web · Security
Server-Side Request Forgery in calibreweb
- GHSA ID
- GHSA-h65g-jfqg-2w6m
- CVE ID
- CVE-2022-0767
- Severity
- critical
- Published
- Updated
- CVSS
- 9.9 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
- CVSS v3
- 9.9 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
Description
calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery (SSRF). This is a result of incomplete SSRF protection that can be bypassed via an HTTP redirect. An HTTP server set up to respond with a 302 redirect may redirect a request to localhost.
CWEs
- CWE-918 · Server-Side Request Forgery (SSRF)