CVE-2024-39307

CVSS V2 None CVSS V3 None
Description
Kavita is a cross platform reading server. Opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Kavita doesn't sanitize or sandbox the contents of epubs, allowing scripts inside ebooks to execute. This vulnerability was patched in version 0.8.1.
Overview
  • CVE ID
  • CVE-2024-39307
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-06-28T20:44:53.930Z
  • Last Modified Date
  • 2024-06-28T20:44:53.930Z
References
Reference URL Reference Tags
https://github.com/Kareadita/Kavita/security/advisories/GHSA-r4qc-3w52-2v84 x_refsource_CONFIRM
History
Created Old Value New Value Data Type Notes
2024-06-29 13:09:48 Added to TrackCVE