CVE-2024-7009

4.2

MEDIUMCVSS v3

Published

August 6, 2024

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

kovidgoyal/calibre

GitHubThe official source code repository for the calibre ebook manager

<= 7.15.0NVD

linuxserver/calibre

Docker Hub

<= 7.15.0NVD

Calibre

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

**calibre is a powerful and easy to use e-book manager**. Users say it's outstanding and a must-have. It'll allow you to do nearly everything and it takes things a step beyond normal e-book software. It's also **completely free** and open source and great for both **casual users** and computer experts. Requires Windows 10 or above. ## Features - Save time on managing your e-book collection - Use it everywhere and with anything - Comprehensive e-book viewer - Download news/magazines from the web - Share and backup your library easily - Edit the books in your collection - Satisfy every e-book need and get support ## Notes - **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**

<= 7.15.0NVD

Security Advisories

CVE-2024-7009

Description

More on this CVE