CVE-2020-37012 in Tea LaTexinfo

Zusammenfassung

von MITRE • 29.01.2026

Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary shell commands through the /api.php endpoint. Attackers can craft a malicious LaTeX payload with shell commands that are executed when processed by the application's tex2png API action.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

VulnCheck

Reservieren

28.01.2026

Veröffentlichung

29.01.2026

Moderieren

akzeptiert

Eintrag

VDB-343396

CPE

bereit

Exploit

Download

EPSS

0.00755

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-37012
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-37012
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-37012/

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!