← All advisories

Moderate severityNVD Advisory· Published Jan 28, 2022· Updated Aug 2, 2024

Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

CVE-2022-0352

Description

Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
calibrewebPyPI	< 0.6.16	0.6.16

Affected products

2

ghsa-coords
pkg:pypi/calibreweb
Range: < 0.6.16
Janeczku/Calibre Webcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-h56g-v4vp-q9q6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0352ghsaADVISORY
github.com/janeczku/calibre-web/commit/6bf07539788004513c3692c074ebc7ba4ce005e1ghsax_refsource_MISCWEB
github.com/pypa/advisory-database/tree/main/vulns/calibreweb/PYSEC-2022-18.yamlghsaWEB
huntr.dev/bounties/a577ff17-2ded-4c41-84ae-6ac02440f717ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.