Skip to content

Improper Restriction of Excessive Authentication Attempts in calibreweb

Moderate severity GitHub Reviewed Published Apr 15, 2023 to the GitHub Advisory Database • Updated Apr 24, 2023

Package

pip calibreweb (pip)

Affected versions

< 0.6.20

Patched versions

0.6.20

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20.

References

Published by the National Vulnerability Database Apr 15, 2023
Published to the GitHub Advisory Database Apr 15, 2023
Reviewed Apr 24, 2023
Last updated Apr 24, 2023

Severity

Moderate

EPSS score

Exploit Prediction Scoring System (EPSS)

This score estimates the probability of this vulnerability being exploited within the next 30 days. Data provided by FIRST.
(73rd percentile)

Weaknesses

CVE ID

CVE-2022-2525

GHSA ID

GHSA-jg8w-wgx2-g7q4

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.