CVE-2024-45312

Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 (or 4.2.7 for the 4.x series) contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the `aspell` executable running on the server. This causes `aspell` to attempt to load a dictionary file with an arbitrary filename. File access is limited to the scope of the overleaf server. The problem is patched in versions 5.0.7 and 4.2.7. Previous versions can be upgraded using the Overleaf toolkit `bin/upgrade` command. Users unable to upgrade may block POST requests to `/spelling/check` via a Web Application Firewall will prevent access to the vulnerable spell check feature. However, upgrading is advised.

• CWE-22
• CWE-641
• CWE-74

• https://github.com/overleaf/overleaf/commit/b5e5d39c3ad4e7763d42b837738955f8ded4dcd3Patch
• https://github.com/overleaf/overleaf/security/advisories/GHSA-pxm4-p454-vppgVendor Advisory
• https://github.com/overleaf/toolkitProduct

Published

Sep 2, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45307SudoBot, a Discord moderation bot, is vulnerable to privileg…9.8
• CVE-2024-45308HedgeDoc is an open source, real-time, collaborative, markdo…6.5
• CVE-2024-45309OneDev is a Git server with CI/CD, kanban, and packages. A v…7.5
• CVE-2024-4531The Business Card WordPress plugin through 1.0.0 does not ha…7.1
• CVE-2024-45310runc is a CLI tool for spawning and running containers accor…3.6
• CVE-2024-45311Quinn is a pure-Rust, async-compatible implementation of the…7.5
• CVE-2024-45313Overleaf is a web-based collaborative LaTeX editor. When ins…5.4
• CVE-2024-45314Flask-AppBuilder is an application development framework. Pr…5.5
• CVE-2024-45315The Improper link resolution before file access ('Link Follo…5.5
• CVE-2024-45316The Improper link resolution before file access ('Link Follo…7.8
• CVE-2024-45317A Server-Side Request Forgery (SSRF) vulnerability in SMA100…7.5
• CVE-2024-45318A vulnerability in the SonicWall SMA100 SSLVPN web managemen…8.1