CVE-2019-10069: Critical severity godot engine vulnerability

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates the flaw is exploitable remotely over the network, with low attack complexity and no privileges or user interaction required.

Q: What is the potential impact of successful exploitation?

Successful exploitation can result in remote code execution. The CVSS vector rates confidentiality, integrity, and availability impacts as high.

Q: Which versions should be considered affected?

Godot through version 3.1 is identified as affected. The provided data does not identify a fixed version.

Published May 31, 2019

Updated

In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.

Affected Software

2 affected components

Godotengine Godot<2.1

Godotengine Godot>=2.1.1<=3.1

Event History

May 31, 2019

CVE Published

via MITRE·09:36 PM

Data Sourced

via MITRE·09:36 PM

Description

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates the flaw is exploitable remotely over the network, with low attack complexity and no privileges or user interaction required.

What is the potential impact of successful exploitation?

Successful exploitation can result in remote code execution. The CVSS vector rates confidentiality, integrity, and availability impacts as high.

Which versions should be considered affected?

Godot through version 3.1 is identified as affected. The provided data does not identify a fixed version.

CVE-2019-10069: Critical severity godot engine vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Which versions should be considered affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Which versions should be considered affected?