Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ikiwiki teximg插件 黑名单不完全漏洞
Vulnerability Description
Ikiwiki是软件开发者Joey和其他贡献者共同开发的一款wiki编译器,它支持将wiki页面转换为网站发布的HTML页面。 Ikiwiki的teximg插件存在黑名单不安全漏洞。由于没有正确地将不安全的TeX命令加入到黑名单,本地攻击者可以使用这个命令读取系统上的任意文件内容。
CVSS Information
N/A
Vulnerability Type
N/A