CVE-2020-37012 in Tea LaTexinformação

Sumário

de MITRE • 29/01/2026

Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary shell commands through the /api.php endpoint. Attackers can craft a malicious LaTeX payload with shell commands that are executed when processed by the application's tex2png API action.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

VulnCheck

Reservar

28/01/2026

Divulgação

29/01/2026

Moderação

aceite

Entrada

VDB-343396

CPE

pronto

Exploração

Descarregar

EPSS

0.00755

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-37012
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-37012
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-37012/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!