Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Wesnoth Subscribe
Filtered by product The Battle For Wesnoth
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-1999023 1 Wesnoth 1 The Battle For Wesnoth 2018-09-20 6.8 MEDIUM 8.8 HIGH
The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player content.