Beveiligingsadvies

CVE-2021-25964

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-10-04 14:55:10

Laatst bijgewerkt 2025-04-30 16:24:59

Toegewezen door Mend

CVSS-score 5.4

Status PUBLISHED

Beschrijving

In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can inject JavaScript payload in the description field. When a victim tries to open the file, XSS will be triggered.

← Alle CVE's bekijken Bekijk op cve.org ↗