ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| calibreweb(PyPI) | 0 | N/A | N/A |
CVSS Metrics
