Description

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

Remediation

References

CVE-2024-43426

Related Vulnerabilities

WordPress Plugin WordPress Books Gallery Security Bypass (3.5)

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Request Forgery (1.13.4)

Oracle HTTP Server CVE-2010-0425 Vulnerability (CVE-2010-0425)

markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2022-21670)

Sqlite Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-19646)

Severity

High

Classification

CVE-2024-43426 CWE-1287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities