tgstation-server prior to 6.8.0 allows low permission users to execute remote code via malicious .dme file
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | CVE-2024-41799 tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users | 29 Jul 202415:00 | – | vulnrichment |
![]() | CVE-2024-41799 | 29 Jul 202415:15 | – | nvd |
![]() | GHSA-C3H4-9GC2-F7H4 tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users | 29 Jul 202416:44 | – | osv |
![]() | CVE-2024-41799 | 29 Jul 202415:15 | – | osv |
![]() | tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users | 29 Jul 202416:44 | – | github |
![]() | CVE-2024-41799 tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users | 29 Jul 202415:00 | – | cvelist |
![]() | Path Traversal | 30 Jul 202407:21 | – | veracode |
[
{
"vendor": "tgstation",
"product": "tgstation-server",
"versions": [
{
"version": ">= 4.0.0, < 6.8.0",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo