VDB
CVE-2024-28245
CVE-2024-28245
PUBLISHED
CVSS 6.300000190734863 MEDIUM
KaTeX's `\includegraphics` does not escape filename
EPSS 0.41% · 33.4th percentile
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.41%
33.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | katex | 0.11.0, 0.11.0 |
| katex | katex | 0.11.0, 0.11.0 |
| KaTeX | KaTeX | >= 0.11.0, < 0.6.10, >= 0.11.0, < 0.6.10 |
| katex | katex | 0.11.0, 0.11.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Mar 25, 2024 CVE Published
- Mar 26, 2024 EPSS Score
- Apr 21, 2024 EPSS Score
- May 16, 2024 EPSS Score
- Jun 11, 2024 EPSS Score
- Jul 7, 2024 EPSS Score
- Aug 1, 2024 EPSS Score
- Aug 27, 2024 EPSS Score
- Sep 22, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 18, 2024 EPSS Score