CVE-2020-37012 in Tea LaTex
摘要
由 MITRE • 2026-01-29
Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary shell commands through the /api.php endpoint. Attackers can craft a malicious LaTeX payload with shell commands that are executed when processed by the application's tex2png API action.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.