high7.5
CVE-2023-46303
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
Impact
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Calibre-Ebook | Calibre | before 6.19.0 |