CVE-2024-7008

2024-08-0604:16:46

Debian Security Bug Tracker

security-tracker.debian.org

calibre security vulnerability

unsanitized user-input

cve-2024-7008

unix platform

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

31.2%

JSON

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

OSVersionArchitecturePackageVersionFilename
Debian12allcalibre< 6.13.0+repack-2+deb12u4calibre_6.13.0+repack-2+deb12u4_all.deb
Debian11allcalibre< 5.12.0+dfsg-1+deb11u2calibre_5.12.0+dfsg-1+deb11u2_all.deb
Debian999allcalibre< 7.16.0+ds-1calibre_7.16.0+ds-1_all.deb
Debian13allcalibre< 7.16.0+ds-1calibre_7.16.0+ds-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	calibre	< 6.13.0+repack-2+deb12u4	calibre_6.13.0+repack-2+deb12u4_all.deb
Debian	11	all	calibre	< 5.12.0+dfsg-1+deb11u2	calibre_5.12.0+dfsg-1+deb11u2_all.deb
Debian	999	all	calibre	< 7.16.0+ds-1	calibre_7.16.0+ds-1_all.deb
Debian	13	all	calibre	< 7.16.0+ds-1	calibre_7.16.0+ds-1_all.deb