Lucene search

K
osvGoogleOSV:GHSA-Q2XP-75M7-GV52
HistoryApr 02, 2019 - 3:36 p.m.

Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction

2019-04-0215:36:49
Google
osv.dev
6

9.4 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.1%

Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.

9.4 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.1%