← Database

CVE-2023-2491

HIGH CVSS: 7.8 Published: 2023-05-17 Modified: 2026-06-17

Description

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

Affected Platforms

Redhat Enterprise Linux Server TusRedhat Enterprise LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux Server AusGnu Emacs

Weakness Type

CWE-77, CWE-77

References