Description

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

Remediation

References

CVE-2025-26525

Related Vulnerabilities

Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-0305)

Drupal Core Security Bypass (8.0.0 - 9.2.21)

WordPress Plugin Logo Showcase with Slick Slider-Logo Carousel, Logo Slider & Logo Grid Cross-Site Scripting (1.2.3)

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-33338)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-19202)

Severity

High

Classification

CVE-2025-26525 CWE-552 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities