PT-2024-22360 · Katex+3 · Katex+3

Martinvks · Published 2024-03-25 · Updated 2025-09-02 · CVE-2024-28245

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions KaTeX versions prior to 0.16.10

Description KaTeX is a JavaScript library for TeX math rendering on the web. Users who render untrusted mathematical expressions could encounter malicious input using includegraphics that runs arbitrary JavaScript, or generate invalid HTML. The includegraphics command did not properly quote its filename argument, allowing it to generate invalid or malicious HTML that runs scripts.

Recommendations Upgrade to KaTeX v0.16.10 to remove this vulnerability. As a temporary workaround, consider avoiding the use of or turning off the trust option, or set it to forbid includegraphics commands. Forbid inputs containing the substring "includegraphics". Sanitize HTML output from KaTeX.

Exploit

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

CVE-2024-28245

GHSA-F98W-7CXR-FF2H

USN-7572-1

Affected Products

Debian

Katex

Linuxmint

Ubuntu

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28245.json · Exploit
• https://github.com/KaTeX/KaTeX/commit/c5897fcd1f73da9612a53e6b5544f1d776e17770 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-28245 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-28245 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-28243 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28245 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28245 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-28245 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-28245 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f98w-7cxr-ff2h · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7572-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23207 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-28245 · Security Note
• https://ubuntu.com/security/CVE-2024-28246 · Vendor Advisory