Kavitareader
Kavitareader Kavita: vulnerabilidades y CVE
Kavitareader Kavita tiene 8 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses3
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-47202 | Crítica (9.3) | 0.22% | — | 26 may 2026 | Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a JWT for any user including admins given knowledge of their… |
| CVE-2026-44776 | Media (5.9) | 0.39% | — | 26 may 2026 | Kavita is a cross platform reading server. Prior to 0.9.0, the download, size-check, and chapter metadata endpoints do not enforce library-level authorization. A low-privileged user who knows or guesses a chapterId,… |
| CVE-2026-44775 | Media (6.9) | 0.43% | — | 26 may 2026 | Kavita is a cross platform reading server. Prior to 0.9.0, the ReaderController.GetImage endpoint is decorated with [AllowAnonymous], allowing completely unauthenticated access to page images from any chapter in any… |
| CVE-2024-39307 | Baja (3.5) | 0.46% | — | 28 jun 2024 | Kavita is a cross platform reading server. Opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Kavita doesn't sanitize or sandbox the contents of epubs, allowing scripts… |
| CVE-2023-0919 | Baja (3.5) | 0.48% | — | 19 feb 2023 | Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0. |
| CVE-2022-3993 | Crítica (9.8) | 1.2% | — | 14 nov 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. |
| CVE-2022-3945 | Media (5.3) | 0.99% | — | 11 nov 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. |
| CVE-2022-2756 | Media (6.5) | 3.3% | — | 10 ago 2022 | Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.