Description

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

Remediation

References

CVE-2024-43426

Related Vulnerabilities

WordPress Plugin AdKlick Advertising Management Unspecified Vulnerability (1.1)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-10160)

WordPress Plugin ABC Test 'id' Parameter Cross-Site Scripting (0.1)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.10)

Drupal Core Remote Code Execution (8.0.0 - 9.2.21)

Severity

High

Classification

CVE-2024-43426 CWE-1287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities