Vulnerabilities

TI-2023-00871 CVE-2023-0919 · GHSA-rmqg-g429-35r5

Missing Authentication for Critical Function in kareadita/kavita

LOW 36

Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00484 Published 2023-02-19 Fixed in 0.7.0 CWE-306

TI-2022-03662 CVE-2022-3993 · GHSA-9wc2-mv76-38jp

HIGH 82

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2022-11-14 Fixed in 0.6.0.3 CWE-307

TI-2022-03617 CVE-2022-3945 · GHSA-hmq2-8vrf-9w7q

MEDIUM 57

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01341 Published 2022-11-11 Fixed in 0.6.0.3 CWE-307

TI-2022-02553 CVE-2022-2756 · GHSA-v6vr-jvvr-p4m5

LOW 35

Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03472 Published 2022-08-10 Fixed in 0.5.4.1 CWE-918