Vulnerabilities

TI-2022-16380 CVE-2022-35953

URL Redirection to Untrusted Site ('Open Redirect') in bookwyrm

MEDIUM 64

BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to read next.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00624 Published 2022-08-12 Fixed in 0.4.5 CWE-601

TI-2022-02451 CVE-2022-2651 · GHSA-mpr5-m5gh-62gw

MEDIUM 59

Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16193 Published 2022-08-04 Fixed in 0.4.5 CWE-305

TI-2022-16352 CVE-2022-35925

HIGH 81

BookWyrm is a social network for tracking reading.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0179 Published 2022-08-02 Fixed in 0.4.5 CWE-287

TI-2022-13180 CVE-2022-31136

LOW 29

Bookwyrm is an open source social reading and reviewing program.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00596 Published 2022-07-07 Fixed in 0.4.1 CWE-79

TI-2022-07696 CVE-2022-23644

MEDIUM 42

BookWyrm is a decentralized social network for tracking reading habits and reviewing books.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00905 Published 2022-02-16 Fixed in 0.3.0 CWE-918