Skip to content
OpenAdvisories

Vendor

overleaf

2 known vulnerabilities.

Products

overleaf 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-45313

    Insecure default setting for Server Pro installed via Overleaf toolkit

    Overleaf is a web-based collaborative LaTeX editor. When installing Server Pro using the Overleaf Toolkit from before 2024-07-17 or legacy docker-compose.yml from before 2024-08-28, the configuration for LaTeX compiles was insecure by default, requiring the a…

    overleaf overleaf
  • Medium 5.3
    CVE-2024-45312

    Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf

    Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 (or 4.2.7 for the 4.x series) contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to …

    overleaf overleaf