FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-12-02 20:06:50 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
bad59128-c188-11e8-9d40-f0def10dca57wesnoth -- Code Injection vulnerability

shadowm reports:

A severe bug was found in the game client which could allow a malicious user to execute arbitrary code through the Lua engine by using specially-crafted code in add-ons, saves, replays, or networked games. This issue affects all platforms and all existing releases since Wesnoth version 1.7.0. Users of all previous version should upgrade immediately.


Discovery 2018-07-14
Entry 2018-09-26
wesnoth
>= 1.7.0 lt 1.14.4,1

CVE-2018-1999023
https://gist.github.com/shikadiqueen/45951ddc981cf8e0d9a74e4b30400380