The vulnerability of the Calibre electronic library’s software lies in the incorrect limitation of the path name to the restricted-access catalog, which allows attackers to disclose protected information.

The vulnerability of the Calibre electronic library software is related to an incorrect limitation on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...