Calibre Web Automated
Approved changes feed: RSS · Atom
cpe:2.3:a:crocodilestick:calibre-web-automated:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Crocodilestick (4131b19d-d26a-55a8-a133-7b078a67688d) |
|---|---|
| Product | Calibre Web Automated (5b2f7390-be05-5870-bfdb-c8119a19c9fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7714 |
vulnerable | 2026-06-08 08:08:57.606170 |
crocodilestick Calibre-Web-Automated Admin Endpoint cwa_functions.py missing authentication
MEDIUM (6.5)
A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component Admin Endpoint. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
Published: 2026-05-04T00:15:11.837Z
Updated: 2026-05-04T12:56:04.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7713 |
vulnerable | 2026-06-08 08:08:57.605597 |
crocodilestick Calibre-Web-Automated Kobo auth-token Route kobo_auth.py generate_auth_token improper authorization
MEDIUM (6.3)
A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py of the component Kobo auth-token Route. The manipulation results in improper authorization. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.0.7 addresses this issue. The patch is identified as 9f50bb2c16160564c9f8777dc2ceed3eb95e4807. The affected component should be upgraded.
Published: 2026-05-04T00:00:32.992Z
Updated: 2026-05-05T19:00:28.901Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.