A vulnerability identified as critical has been detected in kovidgoyal calibre up to 9.5.x. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible.
| Vendor | Product | Versions |
|---|---|---|
| kovidgoyal | calibre | < 9.6.0 |
Updated severity to CRITICAL, added new description, and noted that the vulnerability is actively exploited.
Initial creation
