CVE-2024-28245 in KaTeXinformação

Sumário

de MITRE • 25/03/2024

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\includegraphics` that runs arbitrary JavaScript, or generate invalid HTML. Upgrade to KaTeX v0.16.10 to remove this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

GitHub, Inc.

Reservar

07/03/2024

Divulgação

25/03/2024

Moderação

aceite

Entrada

VDB-257898

CPE

pronto

EPSS

0.00406

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2024-28245
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-28245
CVE Detailshttps://www.cvedetails.com/cve/CVE-2024-28245/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!