CVE-2023-51887

Опубликовано: 24 янв. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL.

Ссылки

https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
Exploit
Third Party Advisory
https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ctan:mathtex:*:*:*:*:*:*:*:*

Версия до 1.05 (включая)

EPSS

Процентиль: 87%

0.03179

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVE-2023-51887

CVSS3: 9.8

ubuntu

около 2 лет назад

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL.

CVE-2023-51887

CVSS3: 9.8

debian

около 2 лет назад

Command Injection vulnerability in Mathtex v.1.05 and before allows a ...

GHSA-663j-9vv5-mmf4

CVSS3: 9.8

github

около 2 лет назад

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL.

EPSS

Процентиль: 87%

0.03179

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77