Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2023-46303

Published: 22/10/2023 Updated: 28/10/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre prior to 6.19.0 can, by default, add resources outside of the document root.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

calibre-ebook calibre

Github Repositories

https://github.com/0x1717/ssrf-via-img

CVE-2023-46303 - SSRF Vulnerability in PANDOC and CALIBRE

🐝 CVE-2023-46303 SSRF Vulnerability in PANDOC and CALIBRE UPDATE -> nvdnistgov/vuln/detail/CVE-2023-46303 securitysnykio/vuln/SNYK-DEBIAN13-CALIBRE-6027875 🍄 PANDOC 🕸️ githubcom/jgm/pandoc (Pandoc in Github) What is Pandoc? Pandoc is a Universal Markup Converter 🍄 CALIBRE 🕸️ githubcom/kovidgoyal/cal

References

CWE-918https://github.com/0x1717/ssrf-via-imghttps://github.com/kovidgoyal/calibre/compare/v6.18.1...v6.19.0https://nvd.nist.govhttps://github.com/0x1717/ssrf-via-img
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073CVE-2024-5496CVE-2024-5495XPath injectionbypassCVE-2024-30043CVE-2024-24919denial of serviceCVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook