CVE-2024-6781

Summary

CVE-2024-6781 is a newly disclosed vulnerability affecting Calibre versions up to 7.14.0. This issue permits unauthenticated attackers to perform path traversal, granting them the ability to read arbitrary files on the affected system. The vulnerability could potentially lead to the exposure of sensitive information or data. Users are strongly advised to upgrade to the latest version of Calibre to mitigate this risk. Failure to do so may leave systems vulnerable to attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.