Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Common LaTeX Service Interface 代码注入漏洞
Vulnerability Description
ShareLaTeX是ShareLaTeX团队开发的一款开源的基于Web的实时协作LaTex编辑器，它支持本地编辑、实时协作和编译LaTeX文档。Common LaTeX Service Interface（CLSI）是一个提供了编译LaTeX文档的API的通用LaTeX服务接口。 ShareLaTeX 0.1.3之前版本中使用的CLSI 0.1.3之前版本中存在安全漏洞。远程攻击者可借助文件名中的‘`’（反引号）字符利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A