Tea LaTex Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Tea LaTex version 1.0. This vulnerability allows unauthenticated attackers to execute arbitrary shell commands via the /api.php endpoint. Exploitation involves crafting a malicious LaTeX payload that, when processed by the application's tex2png API action, executes the embedded shell commands.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Tea LaTex is hosted.

Reproduction

To reproduce this vulnerability, send a POST request to the /api.php endpoint with the action set to tex2png. The request must include a LaTeX payload that contains shell commands. When the server processes the payload, the commands will be executed, leading to remote code execution.