CVE-2022-35978

Katalog CVE

CVSS 10.0 · Critical EPSS 3,1%

Kerentanan Protection Mechanism Failure pada minetest. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

Minetest is a free open-source voxel game engine with easy modding and game creation. In **single player**, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs in is not sandboxed and can directly interfere with the user's system. There are currently no known workarounds.

Rincian

Terbit di NVD

15 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-693: Protection Mechanism Failure

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0 release notes · advisory vendor
• https://github.com/minetest/minetest/commit/da71e86633d0b27cd02d7aac9fdac625d141ca13 patch · advisory pihak ketiga
• https://github.com/minetest/minetest/security/advisories/GHSA-663q-pcjw-27cc advisory pihak ketiga