CVE-2024-7009 PUBLISHED CVSS 4.199999809265137 MEDIUM

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

EPSS 8.42% · 92.3th percentile

Risk Scores

CVSS v3.1
4.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score
8.42%
92.3th percentile

Affected Products

VendorProductVersions
CalibreCalibre7.15.0
calibre-ebookcalibre0
kovidgoyalcalibre0

Timeline

References

Open in Interactive Console →