Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mc4x-r58f-6h93

Опубликовано: 06 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

EPSS

Процентиль: 97%
0.13922
Средний

4.2 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 2 лет назад

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

CVSS3: 7.1
nvd
больше 2 лет назад

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

CVSS3: 7.1
debian
больше 2 лет назад

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissio ...

CVSS3: 7.1
altlinux
около 1 года назад

ALT-PU-2025-8054: package `calibre` update to version 8.4.0-alt1

EPSS

Процентиль: 97%
0.13922
Средний

4.2 Medium

CVSS3

Дефекты

CWE-89