CVE-2015-0933

no score yetEPSS 1.1%

sharelatex sharelatex: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a \include command.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2015-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sharelatex:sharelatex

References

http://www.kb.cert.org/vuls/id/302668
http://www.kb.cert.org/vuls/id/302668

Check your stack JSON