RCE in Sharelatex

CVE-2015-0934

Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.019 (77.9th percentile) — read the EPSS interpretation.

Affected products

Sharelatex
N/a — versions n/a

Weakness classification (CWE)

CWE-77 — Command Injection

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)