Lucene search
HistoryMar 04, 2015 - 2:59 a.m.
CVE-2015-0934
cve-2015-0934
remote code execution
common latex service interface
clsi
sharelatex
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.0%
Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.
Affected configurations
Node
sharelatexsharelatexRange≤0.1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| sharelatex:sharelatex | sharelatex | le | 0.1.2 |
References
Related
cvelist
cvelist
CVE-2015-0934
2015-03-04 02:00:00
nvd
nvd
CVE-2015-0934
2015-03-04 02:59:03
prion
prion
Code injection
2015-03-04 02:59:00
cert
cert
ShareLaTeX vulnerable to remote command execution and information disclosure
2015-03-03 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.0%
Related for CVE-2015-0934