CVE-2024-30205

Katalog CVE

CVSS 7.1 · High EPSS 0,48%

Kerentanan Download of Code Without Integrity Check pada gnu emacs, gnu org mode +1 lainnya. Skor CVSS 3.1 7.1 (High) menurut CISA ADP.

Deskripsi (NVD)

In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.

Rincian

Terbit di NVD

25 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-494: Download of Code Without Integrity Check

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877 patch
• https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514d patch
• http://www.openwall.com/lists/oss-security/2024/03/25/2 mailing list
• https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 release notes
• https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html mailing list
• https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html mailing list