Skip to main content

Download of Code Without Integrity Check

CVE-2024-30205

High
7.1/10

Summary

In emacs versions prior to 29.3, Org mode considers the contents of remote files to be trusted. This affects org-mode versions prior to 9.6.23.

  • LOW
  • LOCAL
  • HIGH
  • UNCHANGED
  • REQUIRED
  • NONE
  • NONE
  • HIGH

CWE-494 - Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

References

Advisory Timeline

  • Published