CVE-2022-0406CWE-285

Improper Authorization in janeczku/calibre-web

Medium · published April 3, 2022

CVSS v3.0

4.3

EPSS

1%

Percentile

51.1

In the wild

Unconfirmed

What it is

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.

The record

Technical detail

CVSS v3.0: 4.3 · MEDIUM
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00663 · 51.1th percentile
Weakness: CWE-285 · Improper Authorization
Published: 2022-04-03T19:05Z

EPSS history

Timeline

03 APR 19:05Z
Improper Authorization in janeczku/calibre-web
cvelistv5