Wind River Support Network

HomeDefectsLIN1021-5452

Not to be fixed

LIN1021-5452 : Security Advisory - emacs - CVE-2023-28617

Created: Mar 19, 2023 Updated: Mar 20, 2023

Resolved Date: Mar 20, 2023

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CREATE(Triage):(User=admin) CVE-2023-28617 (https://nvd.nist.gov/vuln/detail/CVE-2023-28617)