CVE-2025-1244
Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.8EPSS 2.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
12 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
emacsRed Hat · Builds for Red Hat OpenShift 1.3.2Red Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat · Red Hat In-Vehicle Operating System 1Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://access.redhat.com/errata/RHSA-2025:1915https://access.redhat.com/errata/RHSA-2025:1917https://access.redhat.com/errata/RHSA-2025:1961https://access.redhat.com/errata/RHSA-2025:1962https://access.redhat.com/errata/RHSA-2025:1963https://access.redhat.com/errata/RHSA-2025:1964https://access.redhat.com/errata/RHSA-2025:2022https://access.redhat.com/errata/RHSA-2025:2130https://access.redhat.com/errata/RHSA-2025:2157https://access.redhat.com/errata/RHSA-2025:2195https://access.redhat.com/errata/RHSA-2025:2754https://access.redhat.com/security/cve/CVE-2025-1244