PT-2025-32945 · Unknown · Autocaliweb

CVE-2025-55165

·

Publicado

2025-08-12

·

Atualizado

2025-08-13

CVSS v3.1

8.2

Alta

VetorAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Autocaliweb versions prior to 0.8.3
Description: Autocaliweb is a web application that provides an interface for browsing, reading, and downloading eBooks using a Calibre database. The debug pack generated by Autocaliweb can expose sensitive configuration data, including API keys. This is due to the to dict() method not adequately filtering sensitive fields, such as API tokens, when serializing configuration for the debug pack. Sharing these debug packs could inadvertently leak private API keys.
Recommendations: Update Autocaliweb to version 0.8.3 or later.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2025-55165
GHSA-44VP-WGH9-9535

Produtos afetados

Autocaliweb