org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-emacsalma-upgrade-emacs-commonalma-upgrade-emacs-filesystemalma-upgrade-emacs-lucidalma-upgrade-emacs-noxalma-upgrade-emacs-terminal | Apr 25, 2023 | Mar 19, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-emacsamazon-linux-ami-2-upgrade-emacs-commonamazon-linux-ami-2-upgrade-emacs-debuginfoamazon-linux-ami-2-upgrade-emacs-develamazon-linux-ami-2-upgrade-emacs-filesystemamazon-linux-ami-2-upgrade-emacs-lucidamazon-linux-ami-2-upgrade-emacs-noxamazon-linux-ami-2-upgrade-emacs-terminal | Apr 21, 2023 | Mar 19, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-emacsamazon-linux-2023-upgrade-emacs-commonamazon-linux-2023-upgrade-emacs-common-debuginfoamazon-linux-2023-upgrade-emacs-debuginfoamazon-linux-2023-upgrade-emacs-debugsourceamazon-linux-2023-upgrade-emacs-develamazon-linux-2023-upgrade-emacs-filesystemamazon-linux-2023-upgrade-emacs-lucidamazon-linux-2023-upgrade-emacs-lucid-debuginfoamazon-linux-2023-upgrade-emacs-noxamazon-linux-2023-upgrade-emacs-nox-debuginfoamazon-linux-2023-upgrade-emacs-terminal | Feb 17, 2025 | Mar 19, 2023 | |
| Centos_linux | — | centos-upgrade-emacscentos-upgrade-emacs-commoncentos-upgrade-emacs-common-debuginfocentos-upgrade-emacs-debuginfocentos-upgrade-emacs-debugsourcecentos-upgrade-emacs-filesystemcentos-upgrade-emacs-lucidcentos-upgrade-emacs-lucid-debuginfocentos-upgrade-emacs-noxcentos-upgrade-emacs-nox-debuginfocentos-upgrade-emacs-terminal | Apr 25, 2023 | Mar 19, 2023 |
| Debian | debian-upgrade-emacsdebian-upgrade-org-mode | May 11, 2023 | Mar 19, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-emacs-filesystem | May 9, 2023 | Mar 19, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-emacs-filesystem | Jan 10, 2024 | Mar 19, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-emacsoracle-linux-upgrade-emacs-commonoracle-linux-upgrade-emacs-filesystemoracle-linux-upgrade-emacs-lucidoracle-linux-upgrade-emacs-noxoracle-linux-upgrade-emacs-terminal | Apr 25, 2023 | Mar 19, 2023 |
| Redhat_linux | redhat-upgrade-emacsredhat-upgrade-emacs-commonredhat-upgrade-emacs-common-debuginforedhat-upgrade-emacs-debuginforedhat-upgrade-emacs-debugsourceredhat-upgrade-emacs-filesystemredhat-upgrade-emacs-lucidredhat-upgrade-emacs-lucid-debuginforedhat-upgrade-emacs-noxredhat-upgrade-emacs-nox-debuginforedhat-upgrade-emacs-terminal | Apr 25, 2023 | Mar 19, 2023 | |
| Rocky_linux | rocky-upgrade-emacsrocky-upgrade-emacs-commonrocky-upgrade-emacs-common-debuginforocky-upgrade-emacs-debuginforocky-upgrade-emacs-debugsourcerocky-upgrade-emacs-lucidrocky-upgrade-emacs-lucid-debuginforocky-upgrade-emacs-noxrocky-upgrade-emacs-nox-debuginfo | Mar 5, 2024 | Mar 19, 2023 | |
| Ubuntu | ubuntu-pro-upgrade-elpa-orgubuntu-pro-upgrade-emacsubuntu-pro-upgrade-emacs-bin-commonubuntu-pro-upgrade-emacs-commonubuntu-pro-upgrade-emacs-elubuntu-pro-upgrade-emacs24ubuntu-pro-upgrade-emacs24-bin-commonubuntu-pro-upgrade-emacs24-commonubuntu-pro-upgrade-emacs24-elubuntu-pro-upgrade-emacs25ubuntu-pro-upgrade-emacs25-bin-commonubuntu-pro-upgrade-emacs25-commonubuntu-pro-upgrade-emacs25-elubuntu-upgrade-emacsubuntu-upgrade-emacs-bin-commonubuntu-upgrade-emacs-commonubuntu-upgrade-emacs-el | Apr 10, 2023 | Mar 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub