vulnerability
FreeBSD: VID-bad59128-c188-11e8-9d40-f0def10dca57 (CVE-2018-1999023): wesnoth -- Code Injection vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Sep 26, 2018 | Sep 27, 2018 | Mar 25, 2026 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Sep 26, 2018
Added
Sep 27, 2018
Modified
Mar 25, 2026
Description
shadowm reports: A severe bug was found in the game client which could allow a malicious user to execute arbitrary code through the Lua engine by using specially-crafted code in add-ons, saves, replays, or networked games. This issue affects all platforms and all existing releases since Wesnoth version 1.7.0. Users of all previous version should upgrade immediately.
Solution
freebsd-upgrade-package-wesnoth
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.