Lucene search
MitreCVELIST:CVE-2023-28617HistoryMar 19, 2023 - 12:00 a.m.
CVE-2023-28617
2023-03-1900:00:00
mitre
www.cve.org
2
org mode
arbitrary commands
file names
directory names
shell metacharacters
cve-2023-28617
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
References
git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=8f8ec2ccf3f5ef8f38d68ec84a7e4739c45db485
git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=a8006ea580ed74f27f974d60b598143b04ad1741
list.orgmode.org/tencent_04CF842704737012CCBCD63CD654DD41CA0A%40qq.com/T/#m6ef8e7d34b25fe17b4cbb655b161edce18c6655e
lists.debian.org/debian-lts-announce/2023/05/msg00008.html
lists.debian.org/debian-lts-announce/2023/10/msg00019.html
Related
redhatcve
redhatcve
CVE-2023-28617
2023-03-24 13:07:51
CVE-2023-2491
2023-05-03 12:16:44
oraclelinux
oraclelinux
emacs security update
2023-04-24 00:00:00
emacs security update
2023-05-02 00:00:00
nessus
nessus
RHEL 8 : emacs (RHSA-2023:1930)
2023-04-25 00:00:00
RHEL 9 : emacs (RHSA-2023:2010)
2023-04-25 00:00:00
Ubuntu 16.04 ESM : Emacs vulnerability (USN-6003-1)
2023-04-06 00:00:00
rocky
rocky
emacs security update
2023-05-05 15:41:01
emacs security update
2023-04-26 15:28:03
veracode
veracode
OS Command Injection
2023-08-06 07:40:29
cbl_mariner
cbl_mariner
CVE-2023-28617 affecting package emacs for versions less than 28.2-5
2023-03-30 01:18:53
osv
osv
Important: emacs security update
2023-04-26 15:28:03
CVE-2023-28617
2023-03-19 03:15:11
emacs24 vulnerability
2023-04-06 16:15:35
openvas
openvas
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2023-2639)
2023-09-05 00:00:00
Mageia: Security Advisory (MGASA-2023-0152)
2023-04-24 00:00:00
Debian: Security Advisory (DLA-3616-1)
2023-10-13 00:00:00
redhat
redhat
(RHSA-2023:3189) Important: emacs security update
2023-05-17 15:12:59
(RHSA-2023:1915) Important: emacs security update
2023-04-20 13:16:34
(RHSA-2023:2074) Important: emacs security update
2023-05-02 07:07:42
almalinux
almalinux
Important: emacs security update
2023-05-02 00:00:00
Important: emacs security update
2023-04-24 00:00:00
Important: emacs security update
2023-05-16 00:00:00
debian
debian
[SECURITY] [DLA 3616-1] org-mode security update
2023-10-12 11:09:58
[SECURITY] [DLA 3416-1] emacs security update
2023-05-09 23:02:24
cve
cve
CVE-2023-28617
2023-03-19 03:15:11
CVE-2023-2491
2023-05-17 22:15:10
nvd
nvd
CVE-2023-28617
2023-03-19 03:15:11
CVE-2023-2491
2023-05-17 22:15:10
ubuntu
ubuntu
Emacs vulnerability
2023-04-06 00:00:00
prion
prion
Design/Logic Flaw
2023-03-19 03:15:00
Command injection
2023-05-17 22:15:00
ubuntucve
ubuntucve
CVE-2023-28617
2023-03-19 00:00:00
CVE-2023-2491
2023-05-17 00:00:00
mageia
mageia
Updated emacs packages fix security vulnerability
2023-04-24 03:20:26
amazon
amazon
Important: emacs
2023-04-13 19:28:00
debiancve
debiancve
CVE-2023-28617
2023-03-19 03:15:11
CVE-2023-2491
2023-05-17 22:15:10
cvelist
cvelist
CVE-2023-2491
2023-05-17 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps
2023-09-28 07:46:35