In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-emacsalma-upgrade-emacs-commonalma-upgrade-emacs-filesystemalma-upgrade-emacs-lucidalma-upgrade-emacs-noxalma-upgrade-emacs-terminal | Sep 26, 2024 | Mar 25, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-emacsamazon-linux-ami-2-upgrade-emacs-commonamazon-linux-ami-2-upgrade-emacs-debuginfoamazon-linux-ami-2-upgrade-emacs-develamazon-linux-ami-2-upgrade-emacs-filesystemamazon-linux-ami-2-upgrade-emacs-lucidamazon-linux-ami-2-upgrade-emacs-noxamazon-linux-ami-2-upgrade-emacs-terminal | Aug 14, 2024 | Mar 25, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-emacsamazon-linux-2023-upgrade-emacs-commonamazon-linux-2023-upgrade-emacs-common-debuginfoamazon-linux-2023-upgrade-emacs-debuginfoamazon-linux-2023-upgrade-emacs-debugsourceamazon-linux-2023-upgrade-emacs-develamazon-linux-2023-upgrade-emacs-filesystemamazon-linux-2023-upgrade-emacs-lucidamazon-linux-2023-upgrade-emacs-lucid-debuginfoamazon-linux-2023-upgrade-emacs-noxamazon-linux-2023-upgrade-emacs-nox-debuginfoamazon-linux-2023-upgrade-emacs-terminal | Feb 17, 2025 | Mar 25, 2024 | |
| Debian | debian-upgrade-emacsdebian-upgrade-org-mode | May 1, 2024 | Mar 25, 2024 | |
| Freebsd | freebsd-upgrade-package-emacsfreebsd-upgrade-package-emacs-cannafreebsd-upgrade-package-emacs-nox | Dec 10, 2025 | Mar 26, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-app-editors-emacsgentoo-linux-upgrade-app-emacs-org-mode | Jul 3, 2024 | Mar 25, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-emacs-filesystem | Jul 16, 2024 | Mar 25, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-emacs-filesystem | Jun 26, 2024 | Mar 25, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-emacs-filesystem | Oct 8, 2024 | Mar 25, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-emacs-filesystem | Oct 8, 2024 | Mar 25, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-emacsoracle-linux-upgrade-emacs-commonoracle-linux-upgrade-emacs-filesystemoracle-linux-upgrade-emacs-lucidoracle-linux-upgrade-emacs-noxoracle-linux-upgrade-emacs-terminal | Oct 16, 2024 | Mar 25, 2024 |
| Redhat_linux | redhat-upgrade-emacsredhat-upgrade-emacs-commonredhat-upgrade-emacs-common-debuginforedhat-upgrade-emacs-debuginforedhat-upgrade-emacs-debugsourceredhat-upgrade-emacs-filesystemredhat-upgrade-emacs-lucidredhat-upgrade-emacs-lucid-debuginforedhat-upgrade-emacs-noxredhat-upgrade-emacs-nox-debuginforedhat-upgrade-emacs-terminal | Sep 25, 2024 | Mar 25, 2024 | |
| Rocky_linux | rocky-upgrade-emacsrocky-upgrade-emacs-commonrocky-upgrade-emacs-common-debuginforocky-upgrade-emacs-debuginforocky-upgrade-emacs-debugsourcerocky-upgrade-emacs-lucidrocky-upgrade-emacs-lucid-debuginforocky-upgrade-emacs-noxrocky-upgrade-emacs-nox-debuginfo | Nov 20, 2024 | Mar 25, 2024 | |
| Suse | — | suse-upgrade-emacssuse-upgrade-emacs-elsuse-upgrade-emacs-infosuse-upgrade-emacs-noxsuse-upgrade-emacs-x11suse-upgrade-etags | Apr 16, 2024 | Mar 25, 2024 |
| Ubuntu | ubuntu-pro-upgrade-elpa-orgubuntu-pro-upgrade-emacsubuntu-pro-upgrade-emacs-bin-commonubuntu-pro-upgrade-emacs-commonubuntu-pro-upgrade-emacs-elubuntu-pro-upgrade-emacs24ubuntu-pro-upgrade-emacs24-bin-commonubuntu-pro-upgrade-emacs24-commonubuntu-pro-upgrade-emacs24-elubuntu-pro-upgrade-emacs25ubuntu-pro-upgrade-emacs25-bin-commonubuntu-pro-upgrade-emacs25-commonubuntu-pro-upgrade-emacs25-elubuntu-pro-upgrade-org-modeubuntu-upgrade-emacsubuntu-upgrade-emacs-bin-commonubuntu-upgrade-emacs-commonubuntu-upgrade-emacs-el | Sep 20, 2024 | Mar 25, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub