CVE-2022-35978

 

Published at: - 15-08-2022 09:15

Last modified: - 17-08-2022 04:16

Total changes: - 2

Description

Minetest is a free open-source voxel game engine with easy modding and game creation. In **single player**, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs in is not sandboxed and can directly interfere with the user's system. There are currently no known workarounds.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/minetest/minetest/commit/da71e86633d0b27cd02d7aac9fdac625d141ca13
• https://github.com/minetest/minetest/security/advisories/GHSA-663q-pcjw-27cc
• https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0

 

Keywords

NVD

 

CVE-2022-35978

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures