Vulnerability · Published May 20, 2023 · Assigned by mitre
CVE-2023-32700
High 8.8
In plain English
A high-severity command injection in the texlive package (AlmaLinux). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 42.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | texlive | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-adjustbox | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ae | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-algorithms | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-alphalph | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-amscls | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-amsfonts | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-amsmath | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-anyfontsize | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-anysize | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-appendix | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-arabxetex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-arphic | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-atbegshi | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-attachfile | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-attachfile2 | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-atveryend | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-auxhook | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-avantgar | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-awesomebox | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-babel | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-babel-english | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-babelbib | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-base | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-beamer | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bera | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-beton | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bibtex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bibtopic | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bidi | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bigfoot | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bigintcalc | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bitset | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bookman | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-bookmark | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-booktabs | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-breakurl | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-breqn | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-capt-of | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-caption | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-carlisle | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-catchfile | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-changebar | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-changepage | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-charter | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-chngcntr | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cite | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cjk | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-classpack | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cm | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cm-lgc | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cm-super | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cmap | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cmextra | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-cns | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-collectbox | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-collection-basic | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-collection-fontsrecommended | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-collection-htmlxml | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-collection-latex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-collection-latexrecommended | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-collection-xetex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-colorprofiles | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-colortbl | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-context | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-courier | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-crop | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-csquotes | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ctable | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ctablestack | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-currfile | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-datetime | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-dehyph | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-dvipdfmx | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-dvipng | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-dvips | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-dvisvgm | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ec | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-eepic | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-enctex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-enumitem | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-environ | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-epsf | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-epstopdf | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-epstopdf-pkg | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-eqparbox | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-eso-pic | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-etex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-etex-pkg | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-etexcmds | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-etoc | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-etoolbox | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-euenc | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-euler | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-euro | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-eurosym | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-extsizes | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fancybox | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fancyhdr | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fancyref | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fancyvrb | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-filecontents | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-filehook | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-finstrut | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fix2col | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fixlatvian | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-float | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fmtcount | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fncychap | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fontawesome | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fontbook | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fonts-tlwg | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fontspec | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fontware | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fontwrap | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-footmisc | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-footnotehyper | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fp | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-fpl | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-framed | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-garuda-c90 | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-geometry | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-gettitlestring | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-glyphlist | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-gnu-freefont | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-graphics | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-graphics-cfg | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-graphics-def | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-grfext | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-grffile | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-gsftopk | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hanging | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-helvetic | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hobsub | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hologo | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hycolor | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hyperref | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hyph-utf8 | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hyphen-base | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hyphenat | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-hyphenex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ifmtarg | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ifoddpage | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ifplatform | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-iftex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-import | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-index | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-infwarerr | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-intcalc | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-jadetex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-jknapltx | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-kastrup | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-kerkis | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-knuth-lib | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-knuth-local | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-koma-script | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-kpathsea | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-kvdefinekeys | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-kvoptions | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-kvsetkeys | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-l3backend | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-l3experimental | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-l3kernel | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-l3packages | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lastpage | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-latex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-latex-fonts | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-latex2man | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-latexbug | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-latexconfig | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-letltxmacro | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lettrine | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lib | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lib-devel | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-linegoal | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lineno | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-listings | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-listofitems | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lm | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lm-math | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ltabptch | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ltxcmds | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-ltxmisc | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lua-alt-getopt | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-luahbtex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lualatex-math | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lualibs | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-luaotfload | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-luatex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-luatex85 | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-luatexbase | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-lwarp | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-makecmds | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-makeindex | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-manfnt-font | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-marginnote | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-marvosym | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-mathpazo | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-mathspec | 9:20200406-26.el9_2 | ALSA-2023:3661 |
| AlmaLinux:9 | texlive-mathtools | 9:20200406-26.el9_2 | ALSA-2023:3661 |
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H