Описание
Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.
Ссылки
- Patch
- ExploitMitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.15.0 (включая)
cpe:2.3:a:calibre-ebook:calibre:*:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.13922
Средний
4.2 Medium
CVSS3
7.1 High
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 7.1
ubuntu
больше 2 лет назад
Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.
CVSS3: 7.1
debian
больше 2 лет назад
Unsanitized user-input in Calibre <= 7.15.0 allow users with permissio ...
CVSS3: 4.2
github
больше 2 лет назад
Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.
CVSS3: 7.1
altlinux
около 1 года назад
ALT-PU-2025-8054: package `calibre` update to version 8.4.0-alt1
EPSS
Процентиль: 97%
0.13922
Средний
4.2 Medium
CVSS3
7.1 High
CVSS3
Дефекты
CWE-89
CWE-89