Missing Authentication for Critical Function in kareadita/kavita

CVE-2023-0919

What is CVE-2023-0919?

The Kavita application, developed by Kareadita, is affected by a significant security oversight due to missing authentication for critical functions in versions prior to 0.7.0. This vulnerability could potentially allow unauthorized users to access sensitive features, posing a risk to data integrity and user confidentiality. To secure the application, it is essential for users to update to version 0.7.0 or later, where these issues have been addressed and additional protections implemented.

References