CVE-2021-4164: Cross-Site Request Forgery (CSRF)

January 21, 2022

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

References

github.com/advisories/GHSA-wxr6-29pv-ch68
github.com/janeczku/calibre-web/commit/785726deee13b4d56f6c3503dd57c1e3eb7d6f30
huntr.dev/bounties/2debace1-a0f3-45c1-95fa-9d0512680758
nvd.nist.gov/vuln/detail/CVE-2021-4164

Detect and mitigate CVE-2021-4164 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →