medium6.5
CVE-2015-0934
Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (back…
Impact
Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sharelatex | Sharelatex | through 0.1.2 |