5

CVE-2015-0844

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

Data is provided by the National Vulnerability Database (NVD)
Wesnoth ≫ Battle For Wesnoth Version1.7.0
Wesnoth ≫ Battle For Wesnoth Version1.7.1
Wesnoth ≫ Battle For Wesnoth Version1.7.2
Wesnoth ≫ Battle For Wesnoth Version1.7.3
Wesnoth ≫ Battle For Wesnoth Version1.7.4
Wesnoth ≫ Battle For Wesnoth Version1.7.5
Wesnoth ≫ Battle For Wesnoth Version1.7.6
Wesnoth ≫ Battle For Wesnoth Version1.7.7
Wesnoth ≫ Battle For Wesnoth Version1.7.8 Updatebeta1
Wesnoth ≫ Battle For Wesnoth Version1.7.9 Updatebeta2
Wesnoth ≫ Battle For Wesnoth Version1.7.10-1.8 Updatebeta3
Wesnoth ≫ Battle For Wesnoth Version1.7.11-1.8 Updatebeta4
Wesnoth ≫ Battle For Wesnoth Version1.7.12-1.8 Updatebeta5
Wesnoth ≫ Battle For Wesnoth Version1.7.13-1.8 Updatebeta6
Wesnoth ≫ Battle For Wesnoth Version1.7.14-1.8 Updatebeta7
Wesnoth ≫ Battle For Wesnoth Version1.7.15-1.8 Updaterc1
Wesnoth ≫ Battle For Wesnoth Version1.8.0
Wesnoth ≫ Battle For Wesnoth Version1.9.0
Wesnoth ≫ Battle For Wesnoth Version1.9.1
Wesnoth ≫ Battle For Wesnoth Version1.9.2
Wesnoth ≫ Battle For Wesnoth Version1.9.3
Wesnoth ≫ Battle For Wesnoth Version1.9.4
Wesnoth ≫ Battle For Wesnoth Version1.9.5
Wesnoth ≫ Battle For Wesnoth Version1.9.6
Wesnoth ≫ Battle For Wesnoth Version1.9.7
Wesnoth ≫ Battle For Wesnoth Version1.9.8
Wesnoth ≫ Battle For Wesnoth Version1.9.9
Wesnoth ≫ Battle For Wesnoth Version1.9.10
Wesnoth ≫ Battle For Wesnoth Version1.9.11
Wesnoth ≫ Battle For Wesnoth Version1.9.12
Wesnoth ≫ Battle For Wesnoth Version1.9.13
Wesnoth ≫ Battle For Wesnoth Version1.9.14
Wesnoth ≫ Battle For Wesnoth Version1.10.0
Wesnoth ≫ Battle For Wesnoth Version1.11.0
Wesnoth ≫ Battle For Wesnoth Version1.11.1
Wesnoth ≫ Battle For Wesnoth Version1.11.2
Wesnoth ≫ Battle For Wesnoth Version1.11.3
Wesnoth ≫ Battle For Wesnoth Version1.11.4
Wesnoth ≫ Battle For Wesnoth Version1.11.5
Wesnoth ≫ Battle For Wesnoth Version1.11.6
Wesnoth ≫ Battle For Wesnoth Version1.11.7
Wesnoth ≫ Battle For Wesnoth Version1.11.8
Wesnoth ≫ Battle For Wesnoth Version1.11.9
Wesnoth ≫ Battle For Wesnoth Version1.11.10
Wesnoth ≫ Battle For Wesnoth Version1.11.11
Wesnoth ≫ Battle For Wesnoth Version1.11.12
Wesnoth ≫ Battle For Wesnoth Version1.11.13
Wesnoth ≫ Battle For Wesnoth Version1.11.14
Wesnoth ≫ Battle For Wesnoth Version1.11.15
Wesnoth ≫ Battle For Wesnoth Version1.11.16
Wesnoth ≫ Battle For Wesnoth Version1.11.17
Wesnoth ≫ Battle For Wesnoth Version1.11.18
Wesnoth ≫ Battle For Wesnoth Version1.11.19
Wesnoth ≫ Battle For Wesnoth Version1.12.0
Wesnoth ≫ Battle For Wesnoth Version1.12.1
Fedoraproject ≫ Fedora Version20
Fedoraproject ≫ Fedora Version21
Fedoraproject ≫ Fedora Version22
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.65% 0.699
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.