CVE-2024-7008: Calibre Reflected Cross-Site Scripting (XSS)
Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/calibreto a version that resolves this vulnerability.Fixed in 6.13.0+repack-2+deb12u4 - Upgrade
Upgrade
debian/calibreto a version that resolves this vulnerability.Fixed in 7.16.0+ds-1 - Upgrade
Upgrade
debian/calibreto a version that resolves this vulnerability.Fixed in 6.13.0+repack-2+deb12u9Fixed in 6.13.0+repack-2+deb12u10Fixed in 8.5.0+ds-1+deb13u3Fixed in 9.17.0+ds+~1.1.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7008?
CVE-2024-7008 has a medium severity level due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2024-7008?
To fix CVE-2024-7008, upgrade Calibre to the latest version beyond 7.15.0 where the vulnerability is addressed.
Which versions of Calibre are affected by CVE-2024-7008?
CVE-2024-7008 affects Calibre versions up to and including 7.15.0.
What types of attacks can CVE-2024-7008 facilitate?
CVE-2024-7008 can facilitate reflected cross-site scripting (XSS) attacks due to unsanitized user input.
Who is impacted by CVE-2024-7008?
Users of Calibre versions 7.15.0 or earlier are at risk from the vulnerabilities introduced by CVE-2024-7008.