Description (CNA)
calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to an absolute filesystem path and opens it in read-write mode, even when it points outside the conversion extraction directory. This vulnerability is fixed in 9.2.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| kovidgoyal / calibre | affected < 9.2.0 |
CWE
CWE-22, CWE-73, CWE-94
References
- https://github.com/kovidgoyal/calibre/security/advisories/GHSA-8r26-m7j5-hm29
- https://github.com/kovidgoyal/calibre/commit/9484ea82c6ab226c18e6ca5aa000fa16de598726
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.