Miembros de
Boletines de Vulnerabilidades |
MSA-25-0013: Remote code execution risk via MimeTeX command (upstream) |
|
| Software afectado | PHP |
|
di Michael Hawkins. Insufficient sanitizing in an undocumented MimeTeX command resulted in a remote code execution risk for sites using MimeTeX (via the TeX Notation filter).Please also note that due to MimeTeX being un-maintained and without security updates for an extended period of time, it is considered an increasing security risk and not recommended for production use (see workaround below). For this reason MimeTeX support will also be removed from Moodle LMS in the near More info: https://moodle.org/mod/forum/discuss.php?d=467592&parent=1877211 |
|
