CVE-2025-14306criticalCWE-22

CVE-2025-14306: falha crítica em Robocode

Directory Traversal in Robocode's CacheCleaner Component

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Robocode+ Monitorar robocode

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 1.1%
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red
Produtos afetados
Robocode Project · Robocode
CVEs relacionadas — Robocode

No mesmo produto, das mais perigosas para as menos.

CVE-2025-14308CRITICALInteger Overflow in Robocode's Buffer Write MethodEPSS 0.6%CVE-2025-14307CRITICALInsecure Temporary File Creation in Robocode's AutoExtract ComponentEPSS 0.3%