CVE-2020-11722

Published: Apr 12, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://dpmendenhall.blogspot.com/2020/03/dungeon-crawl-stone-soup.html

x_refsource_MISC

https://github.com/crawl/crawl/commit/768f60da87a3fa0b5561da5ade9309577c176d04

x_refsource_MISC

https://github.com/crawl/crawl/commit/fc522ff6eb1bbb85e3de60c60a45762571e48c28

x_refsource_MISC

openSUSE-SU-2020:0549

vendor-advisory

x_refsource_SUSE

FEDORA-2020-c976cfa87e

vendor-advisory

x_refsource_FEDORA

FEDORA-2020-de88782eaa

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-11722

Description

Affected Products

References