Описание
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| calibre | fixed | 6.19.1-1 | package | |
| calibre | fixed | 6.13.0+repack-2+deb12u3 | bookworm | package |
| calibre | no-dsa | buster | package |
Примечания
https://github.com/0x1717/ssrf-via-img
https://github.com/kovidgoyal/calibre/commit/bbbddd2bf4ef4ddb467b0aeb0abe8765ed7f8a6b (v6.19.0)
EPSS
Связанные уязвимости
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
ALT-PU-2024-3333: package `calibre` update to version 7.5.1-alt1
EPSS