CVE-2024-30203

MEDIUM
Published Mar 25, 2024 Modified May 1, 2025

Description

In Emacs before 29.3, Gnus treats inline MIME contents as trusted.

Is your site exposed to CVE-2024-30203?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

Vendor Product
gnu emacs
gnu org_mode
debian debian_linux

References

Frequently Asked Questions

What is CVE-2024-30203? +
In Emacs before 29.3, Gnus treats inline MIME contents as trusted. It has a CVSS v3.1 base score of 5.5 (MEDIUM).
How severe is CVE-2024-30203? +
CVE-2024-30203 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-30203? +
CVE-2024-30203 affects products from debian, gnu, specifically: debian_linux, emacs, org_mode. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-30203? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-5450 9.8

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to …
CVE-2024-39331 9.8

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such …
CVE-2024-38428 9.1

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be …
CVE-2024-27632 8.8

An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the …
CVE-2024-56737 8.8

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS …
CVE-2026-9155 8.8

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-30203 — free, no signup required.