Lucene search
HistoryJan 24, 2024 - 6:15 p.m.
CVE-2023-51889
cve-2023-51889
stack overflow
vulnerability
mathtex
remote attacker
arbitrary code
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%
Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL.
Affected configurations
Node
ctanmathtexRange≤1.05
| CPE | Name | Operator | Version |
|---|---|---|---|
| ctan:mathtex | ctan mathtex | le | 1.05 |
Related
debiancve
debiancve
CVE-2023-51889
2024-01-24 18:15:08
cvelist
cvelist
CVE-2023-51889
2024-01-24 00:00:00
prion
prion
Stack overflow
2024-01-24 18:15:00
ubuntucve
ubuntucve
CVE-2023-51889
2024-01-24 00:00:00
nvd
nvd
CVE-2023-51889
2024-01-24 18:15:08
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%
Related for CVE-2023-51889