Lucene search
HistoryJan 24, 2024 - 5:15 p.m.
CVE-2023-51887
cve-2023-51887
command injection
mathtex
remote code execution
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.4%
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL.
Affected configurations
Node
ctanmathtexRange≤1.05
| CPE | Name | Operator | Version |
|---|---|---|---|
| ctan:mathtex | ctan mathtex | le | 1.05 |
Related
cvelist
cvelist
CVE-2023-51887
2024-01-24 00:00:00
debiancve
debiancve
CVE-2023-51887
2024-01-24 17:15:08
ubuntucve
ubuntucve
CVE-2023-51887
2024-01-24 00:00:00
prion
prion
Command injection
2024-01-24 17:15:00
nvd
nvd
CVE-2023-51887
2024-01-24 17:15:08
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.4%
Related for CVE-2023-51887