Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2015-0933

Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a \include command.

CVSS 2.0 · 3.5 Low EPSS 1.1% KEV · Not listed
Vendors
Sharelatex
Products
Sharelatex
CVE-2015-0934

Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.

CVSS 2.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Sharelatex
Products
Sharelatex