vulnerability

Ubuntu: (Multiple Advisories) (CVE-2023-28617): Emacs vulnerability

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Mar 19, 2023
Added
Apr 10, 2023
Modified
Aug 18, 2025

Description

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

Solutions

ubuntu-pro-upgrade-elpa-orgubuntu-pro-upgrade-emacsubuntu-pro-upgrade-emacs-bin-commonubuntu-pro-upgrade-emacs-commonubuntu-pro-upgrade-emacs-elubuntu-pro-upgrade-emacs24ubuntu-pro-upgrade-emacs24-bin-commonubuntu-pro-upgrade-emacs24-commonubuntu-pro-upgrade-emacs24-elubuntu-pro-upgrade-emacs25ubuntu-pro-upgrade-emacs25-bin-commonubuntu-pro-upgrade-emacs25-commonubuntu-pro-upgrade-emacs25-el
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.