In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.
CVSS
No CVSS.
References
Configurations
History
30 Apr 2025, 16:44
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gnu emacs
Gnu |
|
| CPE | cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:* | |
| References | () https://www.openwall.com/lists/oss-security/2024/06/23/1 - Mailing List | |
| References | () https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 - Mailing List, Patch | |
| References | () https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html - Mailing List | |
| References | () https://news.ycombinator.com/item?id=40768225 - Mailing List | |
| References | () https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 - Release Notes | |
| References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html - Mailing List | |
| References | () https://www.openwall.com/lists/oss-security/2024/06/23/2 - Mailing List | |
| References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html - Mailing List | |
| References | () https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ - Mailing List |
29 Jun 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Jun 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-23 22:15
Updated : 2025-04-30 16:44
NVD link : CVE-2024-39331
Mitre link : CVE-2024-39331
JSON object : View
Products Affected
gnu
- emacs
CWE
No CWE.