PT-2024-41141 · Mimetex+1 · Mimetex+1

Published 2024-01-01 · Updated 2025-11-27 · CVE-2024-40445

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions forkosh Mime Tex versions prior to 1.77

Description A Directory Traversal vulnerability in forkosh Mime Tex allows an attacker to execute arbitrary code via a crafted file upload. This issue enables an attacker to potentially access and manipulate files outside the intended directory structure, leading to arbitrary code execution.

Recommendations For versions prior to 1.77, update to version 1.77 or later to resolve the issue. As a temporary workaround, consider restricting file upload capabilities to minimize the risk of exploitation. Avoid using the vulnerable file upload feature until the issue is resolved.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

ALT-PU-2025-6924

ALT-PU-2025-7344

CVE-2024-40445

Affected Products

Debian

Mimetex

References · 14

• 🔥 https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446 · Exploit
• https://osv.dev/vulnerability/CVE-2024-40445 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40445 · Security Note
• https://ubuntu.com/security/CVE-2024-40445 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-40445 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-40445 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-40445 · Vendor Advisory
• https://github.com/Oefenweb/mimetex/blob/master/mimetex.c#L12414-L12423 · Note
• https://youtu.be/W2KPHFNfgrg · Note
• https://t.me/cvetracker/22124 · Telegram Post
• https://youtu.be/OII16TteaJw · Note
• https://twitter.com/cybercronai/status/1915367771405250718 · Twitter Post
• https://twitter.com/CVEnew/status/1914689916552011852 · Twitter Post
• https://t.me/cvedetector/23524 · Telegram Post