ByteOS Network

NVD Vulnerability Details :

CVE-2025-29049

Awaiting Analysis

Source-cve@mitre.org

Published At-01 Apr, 2025 | 21:15

Updated At-02 Apr, 2025 | 14:58

Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathLive function.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Type: Secondary

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE ID	Type	Source
CWE-79	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-79

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://github.com/advisories/GHSA-qwj6-q94f-8425	cve@mitre.org	N/A
https://github.com/arnog/mathlive/commit/abc26056fd5e29a99edfa96a0bbe855ea2a8b678	cve@mitre.org	N/A
https://github.com/advisories/GHSA-qwj6-q94f-8425	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A