Advisories · Technology
Kareadita Kavita.
Every CVE that names Kareadita Kavita among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint
- Kareadita Kavita
- Path traversal
- CVSS 2.3 Low
Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint
- Kareadita Kavita
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
Kavita: Pre-Auth Account Takeover
- Kareadita Kavita
- Authentication bypass
- CWE-345
- CVSS 5.9 Medium
Kavita: IDOR in /api/Download/*
- Kareadita Kavita
- Broken access control
- CVSS 6.9 Medium
Kavita: No authentication at /api/Reader/image
- Kareadita Kavita
- Authentication bypass
- CVSS 3.5 Low
Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita
- Kareadita Kavita
- Cross-site scripting (XSS)
- CVSS 8.1 High
Missing Authentication for Critical Function in kareadita/kavita
- kareadita/kavita
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
- kareadita/kavita
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
- kareadita/kavita
- Authentication bypass
- CVSS 7.1 High
Server-Side Request Forgery (SSRF) in kareadita/kavita
- kareadita/kavita
- Server-side request forgery (SSRF)