CVE-2021-4170

Source

https://nvd.nist.gov/vuln/detail/CVE-2021-4170

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4170.json

Aliases

• GHSA-wrp6-9w7f-3wxg

Published

2022-01-16T21:15:07Z

Modified

2023-11-29T09:04:25.587969Z

Details

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References

• https://huntr.dev/bounties/ff395101-e392-401d-ab4f-579c63fbf6a0
• https://github.com/janeczku/calibre-web/commit/7ad419dc8c12180e842a82118f4866ac3d074bc5