org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade emacs-lucidUpgrade emacsUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade emacs-commonUpgrade emacs-nox | Apr 25, 2023 | Mar 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade emacs-filesystemUpgrade emacsUpgrade emacs-noxUpgrade emacs-terminalUpgrade emacs-lucidUpgrade emacs-develUpgrade emacs-commonUpgrade emacs-debuginfo | Apr 21, 2023 | Mar 19, 2023 |
| Amazon_linux_2023 | — | Upgrade emacs-noxUpgrade emacs-debugsourceUpgrade emacs-terminalUpgrade emacs-debuginfoUpgrade emacs-filesystemUpgrade emacs-develUpgrade emacs-commonUpgrade emacs-common-debuginfoUpgrade emacs-nox-debuginfoUpgrade emacs-lucid-debuginfoUpgrade emacs-lucidUpgrade emacs | Feb 17, 2025 | Mar 19, 2023 |
| Centos_linux | — | Upgrade emacs-lucid-debuginfoUpgrade emacs-commonUpgrade emacs-lucidUpgrade emacs-debugsourceUpgrade emacs-nox-debuginfoUpgrade emacs-noxUpgrade emacsUpgrade emacs-common-debuginfoUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade emacs-debuginfo | Apr 25, 2023 | Mar 19, 2023 |
| Debian | — | Upgrade emacsUpgrade org-mode | May 11, 2023 | Mar 19, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade emacs-filesystem | May 9, 2023 | Mar 19, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade emacs-filesystem | Jan 10, 2024 | Mar 19, 2023 |
| Oracle_linux | — | Upgrade emacs-noxUpgrade emacs-commonUpgrade emacs-terminalUpgrade emacsUpgrade emacs-lucidUpgrade emacs-filesystem | Apr 25, 2023 | Mar 19, 2023 |
| Redhat_linux | — | Upgrade emacs-debuginfoUpgrade emacs-terminalUpgrade emacs-nox-debuginfoUpgrade emacs-commonUpgrade emacs-lucid-debuginfoUpgrade emacsUpgrade emacs-noxUpgrade emacs-lucidUpgrade emacs-filesystemUpgrade emacs-debugsourceUpgrade emacs-common-debuginfo | Apr 25, 2023 | Mar 19, 2023 |
| Rocky_linux | — | Upgrade emacs-commonUpgrade emacs-debugsourceUpgrade emacs-lucidUpgrade emacs-noxUpgrade emacs-debuginfoUpgrade emacs-lucid-debuginfoUpgrade emacsUpgrade emacs-nox-debuginfoUpgrade emacs-common-debuginfo | Mar 5, 2024 | Mar 19, 2023 |
| Ubuntu | — | Upgrade emacs (Ubuntu Pro)Upgrade emacs24-el (Ubuntu Pro)Upgrade emacsUpgrade emacs-elUpgrade emacs25 (Ubuntu Pro)Upgrade emacs-bin-commonUpgrade emacs24-common (Ubuntu Pro)Upgrade emacs25-common (Ubuntu Pro)Upgrade emacs24 (Ubuntu Pro)Upgrade emacs-bin-common (Ubuntu Pro)Upgrade emacs24-bin-common (Ubuntu Pro)Upgrade emacs25-bin-common (Ubuntu Pro)Upgrade elpa-org (Ubuntu Pro)Upgrade emacs-common (Ubuntu Pro)Upgrade emacs-commonUpgrade emacs25-el (Ubuntu Pro)Upgrade emacs-el (Ubuntu Pro) | Apr 10, 2023 | Mar 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub