High severity7.8NVD Advisory· Published Mar 19, 2023· Updated Jun 17, 2026
CVE-2023-28617
CVE-2023-28617
Description
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- GNU Emacs/Org Modedescription
- osv-coords6 versionspkg:rpm/almalinux/emacspkg:rpm/almalinux/emacs-commonpkg:rpm/almalinux/emacs-filesystempkg:rpm/almalinux/emacs-lucidpkg:rpm/almalinux/emacs-noxpkg:rpm/almalinux/emacs-terminal
< 1:26.1-7.el8_7.1+ 5 more
- (no CPE)range: < 1:26.1-7.el8_7.1
- (no CPE)range: < 1:26.1-7.el8_7.1
- (no CPE)range: < 1:26.1-7.el8_7.1
- (no CPE)range: < 1:26.1-7.el8_7.1
- (no CPE)range: < 1:26.1-7.el8_7.1
- (no CPE)range: < 1:26.1-7.el8_7.1
Patches
Vulnerability mechanics
References
6- git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/nvdMailing ListPatch
- git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/nvdMailing ListPatch
- list.orgmode.org/tencent_04CF842704737012CCBCD63CD654DD41CA0A%40qq.com/T/nvd
- lists.debian.org/debian-lts-announce/2023/05/msg00008.htmlnvd
- lists.debian.org/debian-lts-announce/2023/10/msg00019.htmlnvd
- lists.debian.org/debian-lts-announce/2025/02/msg00033.htmlnvd
News mentions
0No linked articles in our index yet.