ГлавнаяУязвимости → CVE-2024-30205
7.1высокая

CVE-2024-30205

→ есть в БДУ: BDU:2025-16177 (на русском)
Описание (на английском; русское — в БДУ выше)

In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.

Затрагиваемое ПО
Gnu EmacsGnu Org modeDebian Debian linux
CVSS
Балл7.1 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Источники
http://www.openwall.com/lists/oss-security/2024/03/25/2https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514dhttps://lists.debian.org/debian-lts-announce/2024/04/msg00023.htmlhttps://lists.debian.org/debian-lts-announce/2024/04/msg00024.htmlhttp://www.openwall.com/lists/oss-security/2024/03/25/2https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877