CVE-2024-46939CWE-22

Game Extension Engine Path Traversal Vulnerability

Low · published November 28, 2024

CVSS v4.0
2.4
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files

The record
Technical detail
CVSS v4.0
2.4 · LOW
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/AU:N/R:A/V:D
EPSS
0.00203 · 9.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-11-28T03:26Z
EPSS history
Timeline
  • 28 NOV 03:26Z
    Game Extension Engine Path Traversal Vulnerability
    cvelistv5