PT-2024-23254

CVE-2024-30205

·

تاريخ النشر

2024-03-25

·

تاريخ التحديث

2026-10-06

الوصف من

CVSS 3.1
7.1
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Emacs versions prior to 29.3 Org Mode versions prior to 9.6.23
Description The issue arises because Org mode in Emacs considers the contents of remote files to be trusted. This could potentially lead to security issues if malicious content is accessed.
Recommendations For Emacs versions prior to 29.3, update to version 29.3 or later to resolve the issue. For Org Mode versions prior to 9.6.23, update to version 9.6.23 or later to resolve the issue. As a temporary workaround, consider restricting the access to remote files in Org mode until a patch is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALSA-2024:6987
AZL-37080
AZL-37107
CESA-2024_6987
CLSA-2026-1787211247
CLSA-2026-1787212961
CLSA-2026-1787213200
DLA-3801-1
DLA-3802-1
INFSA-2024_6987
INFSA-2024_9302
MGASA-2024-0104
OESA-2024-1390
OPENSUSE-SU-2024_1294-1
RHSA-2024:6987
RHSA-2024_6987
RHSA-2024:9302
RHSA-2024_9302
RLSA-2024:9302
SUSE-SU-2024:1294-1
SUSE-SU-2024:1317-1
SUSE-SU-2024:2297-1
USN-7027-1
USN-7375-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾