CVE-2025-0781CWE-863

Incorrect Authorization in SimGear

High · published January 28, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-01-28T16:34Z
EPSS history
Timeline
  • 28 JAN 16:34Z
    Incorrect Authorization in SimGear
    cvelistv5