CVE-2023-28617: gnu org_mode OS Command Injection
CVSS: 7.8v3.1HighModified
AliasesMGASA-2023-0152RHSA-2023:1915RHSA-2023:1930RHSA-2023:1931RHSA-2023:1958RHSA-2023:2010RHSA-2023:2074RHSA-2023:3189UBUNTU-CVE-2023-28617USN-6003-1DEBIAN-CVE-2023-28617DLA-3616-1
Published 19-03-2023Last modified 03-11-2025
Vulnerability summary
CVE-2023-28617 is a high (CVSS 7.8) OS Command Injection vulnerability in gnu org_mode. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.2% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.47%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4 · Related 2Timeline
- 19-03-2023PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · Red hatEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.47%
Chance of exploitation in the next 30 days
Percentile
39%
Versus all other CVEs
30-day change
0.00 pp
From 0.47% on 20-09-2026
20-09-202620-10-2026
EPSS score0.47%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat11 products
- emacs< 1:26.1-5.el8_2.1 | < 1:26.1-7.el8_7.1 | < 1:26.1-7.el8_6.1 | < 1:26.1-5.el8_4.1 | < 1:27.2-6.el9_0.1 | < 1:27.2-6.el9_1.1 | < 1:26.1-5.el8_1.1
- emacs-common< 1:26.1-5.el8_2.1 | < 1:26.1-7.el8_7.1 | < 1:26.1-7.el8_6.1 | < 1:26.1-5.el8_4.1 | < 1:27.2-6.el9_0.1 | < 1:27.2-6.el9_1.1 | < 1:26.1-5.el8_1.1
- emacs-common-debuginfo< 1:26.1-5.el8_2.1 | < 1:26.1-7.el8_7.1 | < 1:26.1-7.el8_6.1 | < 1:26.1-5.el8_4.1 | < 1:27.2-6.el9_0.1 | < 1:27.2-6.el9_1.1 | < 1:26.1-5.el8_1.1
- emacs-debuginfo< 1:26.1-5.el8_2.1 | < 1:26.1-7.el8_7.1 | < 1:26.1-7.el8_6.1 | < 1:26.1-5.el8_4.1 | < 1:27.2-6.el9_0.1 | < 1:27.2-6.el9_1.1 | < 1:26.1-5.el8_1.1
- emacs-debugsource< 1:26.1-5.el8_2.1 | < 1:26.1-7.el8_7.1 | < 1:26.1-7.el8_6.1 | < 1:26.1-5.el8_4.1 | < 1:27.2-6.el9_0.1 | < 1:27.2-6.el9_1.1 | < 1:26.1-5.el8_1.1
Ubuntu6 products
- emacs< 1:26.3+1-1ubuntu2+esm1 | < 1:27.1+1-3ubuntu5.2
- emacs24< 24.5+1-6ubuntu1.1+esm3
- emacs25< 25.2+1-6ubuntu0.1~esm2
- org-mode< 9.5.2+dfsh-4ubuntu0.1~esm1
- xemacs21All versions (No fix recorded)
Debian2 products
- emacs< 1:28.2+1-14
- org-mode< 9.5.2+dfsh-5 | < 9.1.14+dfsg-3+deb10u1
Gnu1 product
- org_mode≤ 9.6.1
Mageia1 product
- emacs< 27.1-1.4.mga8
5 vendors · 21 products
