CVE-2023-51889

Опубликовано: 24 янв. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL.

Ссылки

https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
Exploit
Third Party Advisory
https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ctan:mathtex:*:*:*:*:*:*:*:*

Версия до 1.05 (включая)

EPSS

Процентиль: 86%

0.02948

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2023-51889

CVSS3: 9.8

ubuntu

около 2 лет назад

Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL.

CVE-2023-51889

CVSS3: 9.8

debian

около 2 лет назад

Stack Overflow vulnerability in the validate() function in Mathtex v.1 ...

GHSA-57w7-wm2r-3f6f

CVSS3: 9.8

github

около 2 лет назад

Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL.

EPSS

Процентиль: 86%

0.02948

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787