Lucene search
K

10 matches found

OSV
OSV
added 2025/09/10 8:28 p.m.3 views

GHSA-7CF7-9WRR-VRF4 Indico vulnerable to Cross-Site Scripting via LaTeX math code

Impact There is a Cross-Site-Scripting vulnerability when rendering LaTeX math code in contribution or abstract descriptions. Patches You should to update to Indico 3.3.8 as soon as possible. See the docs for instructions on how to update. Workarounds Only let trustworthy users create content on...

4.6CVSS7.2AI score0.00044EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/09/10 8:28 p.m.4 views

Indico vulnerable to Cross-Site Scripting via LaTeX math code

Impact There is a Cross-Site-Scripting vulnerability when rendering LaTeX math code in contribution or abstract descriptions. Patches You should to update to Indico 3.3.8 as soon as possible. See the docs for instructions on how to update. Workarounds Only let trustworthy users create content on...

5.4CVSS7.1AI score0.00044EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2025/09/10 4:3 p.m.17 views

CVE-2025-59035

CVE-2025-59035 — Indico XSS via LaTeX math rendering : Multiple sources (NVD, Red Hat, OSV, GHSA advisories, Snyk) confirm a Cross-Site Scripting vulnerability in Indico prior to version 3.3.8, triggered when rendering LaTeX math code in contribution or abstract descriptions. A fixed release is I...

5.4CVSS6.6AI score0.00044EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/10 4:3 p.m.1 views

CVE-2025-59035 Indico vulnerable to Cross-Site Scripting via LaTeX math code

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, there is a Cross-Site-Scripting vulnerability when rendering LaTeX math code in contribution or abstract descriptions. Users should to update to Indico 3.3.8 as...

4.6CVSS6.9AI score0.00044EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/10 4:3 p.m.4 views

CVE-2025-59035 Indico vulnerable to Cross-Site Scripting via LaTeX math code

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, there is a Cross-Site-Scripting vulnerability when rendering LaTeX math code in contribution or abstract descriptions. Users should to update to Indico 3.3.8 as...

4.6CVSS0.00044EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/10 12:0 a.m.2 views

Indico 跨站脚本漏洞

Indico is a feature-rich event management system from Indico Open Source. A cross-site scripting vulnerability exists in Indico versions prior to 3.3.8 that stems from a cross-site scripting vulnerability when rendering LaTeX math code...

5.4CVSS5.8AI score0.00044EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/25 12:0 a.m.20 views

Fedora Update for mimetex FEDORA-2013-3902

Check for the Version of mimetex OpenVAS Vulnerability Test Fedora Update for mimetex FEDORA-2013-3902 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS1.2AI score0.11169EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2013/03/25 12:0 a.m.23 views

Fedora Update for mimetex FEDORA-2013-3910

Check for the Version of mimetex OpenVAS Vulnerability Test Fedora Update for mimetex FEDORA-2013-3910 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS1.2AI score0.11169EPSS
Exploits2References2
Fedora
Fedora
added 2013/03/24 12:3 a.m.18 views

[SECURITY] Fedora 17 Update: mimetex-1.74-1.fc17

MimeTeX lets you easily embed LaTeX math in your html pages. It parses a La TeX math expression and immediately emits the corresponding gif image, rather t han the usual TeX dvi. And mimeTeX is an entirely separate little program that doesn't use TeX or its fonts in any way...

10CVSS0.7AI score0.11169EPSS
Exploits2
Fedora
Fedora
added 2013/03/23 11:59 p.m.24 views

[SECURITY] Fedora 18 Update: mimetex-1.74-1.fc18

MimeTeX lets you easily embed LaTeX math in your html pages. It parses a La TeX math expression and immediately emits the corresponding gif image, rather t han the usual TeX dvi. And mimeTeX is an entirely separate little program that doesn't use TeX or its fonts in any way...

10CVSS0.7AI score0.11169EPSS
Exploits2
Rows per page
Query Builder