CVE-2020-12627

Calibre-Web 0.6.6 allows authentication bypass because of the ‘A0Zr98j/3yX R~XHH!jmN]LWX/,?RT’ hardcoded secret key.

Date published : 2020-05-03

https://github.com/janeczku/calibre-web/pull/1337