Cross-site Scripting (XSS)

Overview mathlive is an A web component for math input Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Box.toMarkup method src/core/box.ts and the MathML serializer src/formats/atom-to-math-ml.ts, which emit literal characters from LaTeX text-mode commands into...

EUVD-2018-13777

Malware in sbrugna...

CVE-2018-21262

An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service application crash via invalid LaTeX text...

Mattermost Server Input Validation Error Vulnerability (CNVD-2020-41175)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An input validation error vulnerability exists in Mattermost Server versions prior to 4.7.3. An attacker can exploit this vulnerability to cause a denial of service application crash with invalid...

CVE-2018-21262

An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service application crash via invalid LaTeX text...

CVE-2018-21262

An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service application crash via invalid LaTeX text...

Design/Logic Flaw

An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service application crash via invalid LaTeX text...

CVE-2018-21262

An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service application crash via invalid LaTeX text...

CVE-2018-21262

An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service application crash via invalid LaTeX text...

CVE-2018-21262: Improper Input Validation

An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service application crash via invalid LaTeX text...

PT-2020-8905

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 4.7.3 Description The issue allows attackers to cause a denial of service, resulting in an application crash, by providing invalid LaTeX text. Recommendations For versions prior to 4.7.3, update to version...