CVE-2024-30205

In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.

• CWE-494

• http://www.openwall.com/lists/oss-security/2024/03/25/2Mailing List
• https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877Patch
• https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29Release Notes
• https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514dPatch
• https://lists.debian.org/debian-lts-announce/2024/04/msg00023.htmlMailing List
• https://lists.debian.org/debian-lts-announce/2024/04/msg00024.htmlMailing List
• http://www.openwall.com/lists/oss-security/2024/03/25/2Mailing List
• https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877Patch
• https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29Release Notes
• https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514dPatch
• https://lists.debian.org/debian-lts-announce/2024/04/msg00023.htmlMailing List
• https://lists.debian.org/debian-lts-announce/2024/04/msg00024.htmlMailing List

Published

Mar 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3020The plugin is vulnerable to PHP Object Injection in versions…7.2
• CVE-2024-30200Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2024-30201Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2024-30202In Emacs before 29.3, arbitrary Lisp code is evaluated as pa…7.8
• CVE-2024-30203In Emacs before 29.3, Gnus treats inline MIME contents as tr…5.5
• CVE-2024-30204In Emacs before 29.3, LaTeX preview is enabled by default fo…2.8
• CVE-2024-30206A vulnerability has been identified in SIMATIC RTLS Locating…8.8
• CVE-2024-30207A vulnerability has been identified in SIMATIC RTLS Locating…10
• CVE-2024-30208A vulnerability has been identified in SIMATIC RTLS Locating…6.3
• CVE-2024-30209A vulnerability has been identified in SIMATIC RTLS Locating…9.6
• CVE-2024-3021The Mhr Post Ticker plugin for WordPress is vulnerable to St…4.4
• CVE-2024-30210IO-1020 Micro ELD uses a default WIFI password that could al…7.4