CVE-2022-0406
Assigner: @huntrdev
Published: 2022-04-03T19:05:10
State: PUBLISHED
affected: product: janeczku/calibre-web
vendor: janeczku
versions: lessThan: 0.6.16
status: affected
version: unspecified
versionType: custom
descriptions: value: Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-285
description: CWE-285 Improper Authorization
type: CWE
source: advisory: d7498799-4797-4751-b5e2-b669e729d5db
discovery: EXTERNAL
title: Improper Authorization in janeczku/calibre-web