CVE-2020-11722

EPSS 3.9%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 3.9%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

12 Apr 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00037.html https://dpmendenhall.blogspot.com/2020/03/dungeon-crawl-stone-soup.html https://github.com/crawl/crawl/commit/768f60da87a3fa0b5561da5ade9309577c176d04 https://github.com/crawl/crawl/commit/fc522ff6eb1bbb85e3de60c60a45762571e48c28 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QLPN635S7J3MUXLIHYK6MDAHEIASFYP/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNXK7QE7EA7XSDDNOWX2A6MJNWOIYCTC/