Description
Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.
References
- VU#302668 third-party-advisory
Unscored
CVE-2015-0934
EUVD-2015-0942GHSA-w4p7-r5vj-mhx5
Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitr…
Published Mar 4, 2015 · Updated Aug 6, 2024 · Assigned by certcc