ГлавнаяУязвимости → CVE-2024-30202
7.8высокая

CVE-2024-30202

Описание

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

Затрагиваемое ПО
Gnu EmacsGnu Org mode
CVSS
Балл7.8 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
http://www.openwall.com/lists/oss-security/2024/03/25/2http://www.openwall.com/lists/oss-security/2024/04/08/6https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=befa9fcaae29a6c9a283ba371c3c5234c7f644ebhttps://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=003ddacf1c8d869b1858181c29ea21b731a8d8d9http://www.openwall.com/lists/oss-security/2024/03/25/2http://www.openwall.com/lists/oss-security/2024/04/08/6https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=befa9fcaae29a6c9a283ba371c3c5234c7f644eb