Beveiligingsadvies

CVE-2021-25965

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-11-16 09:15:11

Laatst bijgewerkt 2025-04-30 15:46:00

Toegewezen door Mend

CVSS-score 8.8

Status PUBLISHED

Beschrijving

In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them to take over the application.

← Alle CVE's bekijken Bekijk op cve.org ↗