ALT Linux Team

Package mathjax update in sisyphus on 2024-04-08

ALT-PU-2018-3677-1

Package mathjax updated to version 2.7.4-alt1_3 for branch sisyphus in task 214653.

Closed vulnerabilities

Published: 2018-07-23
Modified: 2024-11-21

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processed using Mathjax. This vulnerability appears to have been fixed in 2.7.4 and later.

Severity: MEDIUM (5.4) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top