PT-2024-23254
CVE-2024-30205
·
تاريخ النشر
2024-03-25
·
تاريخ التحديث
2026-10-06
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Emacs versions prior to 29.3
Org Mode versions prior to 9.6.23
Description
The issue arises because Org mode in Emacs considers the contents of remote files to be trusted. This could potentially lead to security issues if malicious content is accessed.
Recommendations
For Emacs versions prior to 29.3, update to version 29.3 or later to resolve the issue.
For Org Mode versions prior to 9.6.23, update to version 9.6.23 or later to resolve the issue.
As a temporary workaround, consider restricting the access to remote files in Org mode until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾