CVE-2019-10648

2019-03-3013:29:00

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.1%

JSON

Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.

CPENameOperatorVersion
robocodeeqVER_1_9_2_6
robocodeeqVER_1_9_3_5
robocodeeqVER_1_7_4_3
robocodeeqVER_1_9_3_3
robocodeeqVER_1_9_2_1
robocodeeqVER_1_9_2_4
robocodeeq1.9.2.6
robocodeeqVER_1_9_2_3
robocodeeqVER_1_9_2_2
robocodeeqVER_1_9_3_2

Name	Operator	Version
robocode	eq	VER_1_9_2_6
robocode	eq	VER_1_9_3_5
robocode	eq	VER_1_7_4_3
robocode	eq	VER_1_9_3_3
robocode	eq	VER_1_9_2_1
robocode	eq	VER_1_9_2_4
robocode	eq	1.9.2.6
robocode	eq	VER_1_9_2_3
robocode	eq	VER_1_9_2_2
robocode	eq	VER_1_9_3_2