Description

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.

Remediation

References

CVE-2021-40694

Related Vulnerabilities

Liferay DXP Improper Certificate Validation Vulnerability (CVE-2022-42131)

Drupal Core 4.5.x Multiple Vulnerabilities (4.5.0 - 4.5.5)

WordPress Plugin Social Sharing-Social Warfare Malicious Code (4.4.7.1)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-7065)

WordPress Other Vulnerability (CVE-2005-2107)

Severity

Medium

Classification

CVE-2021-40694 CWE-116 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities