low3.5
CVE-2015-0933
Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to re…
Impact
Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a \include command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sharelatex | Sharelatex | through 0.1.2 |