CVE-2024-7009

Calibre SQL Injection

Summary

Original description

The description as published by the source.

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-7009 calibre Fixed in: 5.12.0+dfsg-1+deb11u2
Ubuntu UBUNTU-CVE-2024-7009 calibre

References

advisory github.com
advisory nvd.nist.gov
advisory starlabs.sg
package github.com
patch github.com

Metadata

CVE: CVE-2024-7009
Published: 2024-08-06
First seen on SecPulse: 2 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-89

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago