PT-2023-29947 · Calibre · Calibre

Name of the Vulnerable Software and Affected Versions: calibre versions prior to 6.19.0 Description: The issue allows adding resources outside of the document root by default, due to the link to local path in ebooks/conversion/plugins/html input.py. Recommendations: For versions prior to 6.19.0,...