Skip to content

Improper Restriction of Excessive Authentication Attempts in calibreweb

Moderate severity GitHub Reviewed Published Apr 15, 2023 to the GitHub Advisory Database • Updated Apr 24, 2023

Package

pip calibreweb (pip)

Affected versions

< 0.6.20

Patched versions

0.6.20

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20.

References

Published by the National Vulnerability Database Apr 15, 2023
Published to the GitHub Advisory Database Apr 15, 2023
Reviewed Apr 24, 2023
Last updated Apr 24, 2023

Severity

Moderate

EPSS score

0.265%
(66th percentile)

Weaknesses

CVE ID

CVE-2022-2525

GHSA ID

GHSA-jg8w-wgx2-g7q4

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.