CVE-2023-28617

Опубликовано: 19 мар. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:org_mode:*:*:*:*:*:gnu_emacs:*:*

Версия до 9.6.1 (включая)

EPSS

Процентиль: 8%

0.00031

Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVE-2023-28617

CVSS3: 7.8

ubuntu

почти 3 года назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

redhat

почти 3 года назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

msrc

почти 3 года назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CVE-2023-28617

CVSS3: 7.8

debian

почти 3 года назад

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for G ...

RLSA-2023:2074

rocky

больше 2 лет назад

Important: emacs security update

EPSS

Процентиль: 8%

0.00031

Низкий

7.8 High

CVSS3

Дефекты

CWE-78