CVE-2020-11722

Katalog CVE

CVSS 9.8 · Critical EPSS 3,9%

Kerentanan Unrestricted Upload of File with Dangerous Type pada dungeon crawl stone soup project dungeon crawl stone soup. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

Rincian

Terbit di NVD

12 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

3,9% peluang dieksploitasi; lebih tinggi dari 90,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://dpmendenhall.blogspot.com/2020/03/dungeon-crawl-stone-soup.html patch · advisory pihak ketiga
• https://github.com/crawl/crawl/commit/768f60da87a3fa0b5561da5ade9309577c176d04 patch · advisory pihak ketiga
• https://github.com/crawl/crawl/commit/fc522ff6eb1bbb85e3de60c60a45762571e48c28 patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00037.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QLPN635S7J3M...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNXK7QE7EA7XS...