CVE-2020-37012 — Tea LaTex 1.0 - Remote Code Execution
Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary shell commands through the /api.php endpoint. Attackers c…
Published: 2026-01-29 · CVSS: 9.3 · CVSS 4.0
Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary shell commands through the /api.php endpoint. Attackers can craft a malicious LaTeX payload with shell commands that are executed when processed by the application's tex2png API action.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7