CVE-2024-6781: Path Traversal
Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/calibreto a version that resolves this vulnerability.Fixed in 7.16.0+ds-1 - Upgrade
Upgrade
debian/calibreto a version that resolves this vulnerability.Fixed in 6.13.0+repack-2+deb12u9Fixed in 6.13.0+repack-2+deb12u10Fixed in 8.5.0+ds-1+deb13u3Fixed in 9.17.0+ds+~1.1.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6781?
CVE-2024-6781 is rated as a high-severity vulnerability due to its ability to allow arbitrary file read by unauthenticated attackers.
How do I fix CVE-2024-6781?
To fix CVE-2024-6781, you should upgrade Calibre to version 7.15.0 or later, which addresses the path traversal issue.
Who is affected by CVE-2024-6781?
CVE-2024-6781 affects all versions of Calibre up to and including 7.14.0.
What type of vulnerability is CVE-2024-6781?
CVE-2024-6781 is a path traversal vulnerability that allows unauthorized access to files on the system.
Can CVE-2024-6781 be exploited remotely?
Yes, CVE-2024-6781 can be exploited remotely since it allows unauthenticated attackers to read arbitrary files.