overleaf

Products

ProductCVEsExploitedLatest
overleaf2–Sep 2, 2024

Exploited and recent CVEs

  • CVE-2024-45313 Medium 5.4 Insecure default setting for Server Pro installed via Overleaf toolkit 0.3%
  • CVE-2024-45312 Medium 5.3 Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf 0.5%