CVE-2024-6781 Scanner

Calibre is a popular open-source ebook management software widely used by individuals and organizations to organize, manage, and view ebook collections. It offers a content server feature that allows users to access their library remotely. Developed to work across multiple platforms, Calibre is favored for its robust functionality and customization options. Its server feature is used by those needing remote access to their ebooks, either for personal use or shared libraries. However, it is crucial to ensure that Calibre's installation is secure, especially when the content server is exposed to the internet.

The Arbitrary File Read vulnerability in Calibre allows an attacker to read any file on the server’s file system, potentially accessing sensitive data. This vulnerability is exploitable via the Calibre content server's exposed endpoints. If exploited, unauthorized users can retrieve files from locations they should not have access to. This could lead to significant information disclosure if the server contains sensitive files.

The vulnerability exists in the Calibre content server’s handling of specific endpoints used for exporting data. By manipulating the request sent to the server, an attacker can craft a request that bypasses normal access controls. The vulnerable endpoint is /cdb/cmd/export, and the parameter that can be exploited is the file path, which can be altered to traverse directories (../../../../../) and access files like /etc/passwd. The server responds with the content of the file in a JSON format, allowing the attacker to read the file's contents.

If exploited, this vulnerability could lead to the unauthorized disclosure of sensitive files, including configuration files, password files, or other confidential information stored on the server. Such an information leak could then be used to further compromise the system, potentially leading to full server access. This could also impact the privacy of users accessing the content server.

By using the S4E platform, you can ensure that your web-facing assets are continuously monitored for vulnerabilities like Arbitrary File Read in Calibre. The platform provides automated, detailed scans that help identify and mitigate risks before they are exploited by malicious actors. Join the platform to gain access to a wide range of security tools, regular updates on emerging threats, and a comprehensive report of your digital assets' security posture.

References:

• https://starlabs.sg/advisories/24/24-6781/
• https://nvd.nist.gov/vuln/detail/CVE-2024-6781