Lucene search

K
osvGoogleOSV:CVE-2023-28617
HistoryMar 19, 2023 - 3:15 a.m.

CVE-2023-28617

2023-03-1903:15:11
Google
osv.dev
8
cve-2023-28617
arbitrary command execution
org mode
gnu emacs
security vulnerability

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.