Vulnerability Details CVE-2015-0933
Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a \include command.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.9%
CVSS Severity
CVSS v2 Score 3.5
Products affected by CVE-2015-0933
-
cpe:2.3:a:sharelatex:sharelatex:0.1.2