Vulnerabilities > CVE-2023-46303 - Server-Side Request Forgery (SSRF) vulnerability in Calibre-Ebook Calibre
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.