PT-2023-29947 · Calibre+1 · Calibre+1

0X1717 Aka Gyg3S · Published 2023-10-22 · Updated 2025-02-12 · CVE-2023-46303

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions calibre versions prior to 6.19.0

Description The issue allows adding resources outside of the document root by default, due to the link to local path in ebooks/conversion/plugins/html input.py.

Recommendations For versions prior to 6.19.0, update to version 6.19.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the link to local path function in html input.py to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

ALT-PU-2024-3333

CVE-2023-46303

DLA-3862-1

MGASA-2025-0049

Affected Products

Alt Linux

Calibre

References · 27

• 🔥 https://github.com/0x1717/ssrf-via-img · Exploit
• https://osv.dev/vulnerability/CVE-2023-46303 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/PTG4W7NKCI3YSS24S3XTWQKFDUAR6BN3 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3862-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46303 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46303 · Security Note
• https://security-tracker.debian.org/tracker/source-package/calibre · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-46303 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0049 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2024-3333 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-46303 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-46303 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-3862-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-46303 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44686 · Security Note