exploitDog

CVE-2015-0934

Опубликовано: 04 мар. 2015

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.

Ссылки

http://www.kb.cert.org/vuls/id/302668
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/302668
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sharelatex:sharelatex:*:*:*:*:*:*:*:*

Версия до 0.1.2 (включая)

EPSS

Процентиль: 81%

0.01555

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-w4p7-r5vj-mhx5

github

больше 3 лет назад

Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.

EPSS

Процентиль: 81%

0.01555

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-77