org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade emacsUpgrade emacs-lucidUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade emacs-noxUpgrade emacs-common | Apr 25, 2023 | Mar 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade emacs-noxUpgrade emacsUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade emacs-lucidUpgrade emacs-commonUpgrade emacs-debuginfoUpgrade emacs-devel | Apr 21, 2023 | Mar 19, 2023 |
| Amazon_linux_2023 | — | Upgrade emacs-nox-debuginfoUpgrade emacs-filesystemUpgrade emacs-lucidUpgrade emacs-lucid-debuginfoUpgrade emacs-commonUpgrade emacs-develUpgrade emacsUpgrade emacs-common-debuginfoUpgrade emacs-debugsourceUpgrade emacs-debuginfoUpgrade emacs-terminalUpgrade emacs-nox | Feb 17, 2025 | Mar 19, 2023 |
| Centos_linux | — | Upgrade emacs-noxUpgrade emacs-common-debuginfoUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade emacsUpgrade emacs-debuginfoUpgrade emacs-debugsourceUpgrade emacs-nox-debuginfoUpgrade emacs-lucid-debuginfoUpgrade emacs-commonUpgrade emacs-lucid | Apr 25, 2023 | Mar 19, 2023 |
| Debian | — | Upgrade emacsUpgrade org-mode | May 11, 2023 | Mar 19, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade emacs-filesystem | May 9, 2023 | Mar 19, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade emacs-filesystem | Jan 10, 2024 | Mar 19, 2023 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade emacs-commonUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade emacsUpgrade emacs-lucid | Apr 25, 2023 | Mar 19, 2023 |
| Redhat_linux | — | Upgrade emacs-nox-debuginfoUpgrade emacs-terminalUpgrade emacs-commonUpgrade emacs-debuginfoUpgrade emacs-common-debuginfoUpgrade emacs-filesystemUpgrade emacs-lucid-debuginfoUpgrade emacs-debugsourceUpgrade emacsUpgrade emacs-noxUpgrade emacs-lucid | Apr 25, 2023 | Mar 19, 2023 |
| Rocky_linux | — | Upgrade emacsUpgrade emacs-nox-debuginfoUpgrade emacs-common-debuginfoUpgrade emacs-debuginfoUpgrade emacs-lucid-debuginfoUpgrade emacs-commonUpgrade emacs-lucidUpgrade emacs-noxUpgrade emacs-debugsource | Mar 5, 2024 | Mar 19, 2023 |
| Ubuntu | — | Upgrade emacs25-el (Ubuntu Pro)Upgrade elpa-org (Ubuntu Pro)Upgrade emacs25-bin-common (Ubuntu Pro)Upgrade emacs-commonUpgrade emacs-common (Ubuntu Pro)Upgrade emacs24-bin-common (Ubuntu Pro)Upgrade emacs-el (Ubuntu Pro)Upgrade emacsUpgrade emacs24-common (Ubuntu Pro)Upgrade emacs24 (Ubuntu Pro)Upgrade emacs24-el (Ubuntu Pro)Upgrade emacs-bin-commonUpgrade emacs25-common (Ubuntu Pro)Upgrade emacs25 (Ubuntu Pro)Upgrade emacs-bin-common (Ubuntu Pro)Upgrade emacs-elUpgrade emacs (Ubuntu Pro) | Apr 10, 2023 | Mar 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub