Threats tagged 'ghsa-6xgw-x2hr-63c2'

A vulnerability in janeczku Calibre-Web up to version 0.6.26 allows improper authorization due to manipulation of the user_id argument in the generate_auth_token function within cps/kobo_auth.py. This flaw can be exploited remotely and public exploit code is available. The vendor has not responded to the disclosure. The CVSS score is 6.3, indicating a medium severity issue.