{ "CVE_data_meta" : { "ASSIGNER" : "kurt@seifried.org", "DATE_ASSIGNED" : "2018-07-22T01:05:34.780576", "DATE_REQUESTED" : "2018-07-21T05:38:45", "ID" : "CVE-2018-1999023", "REQUESTER" : "shadowm2006@gmail.com", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "The Battle for Wesnoth", "version" : { "version_data" : [ { "version_value" : "1.7.0 - 1.14.3" } ] } } ] }, "vendor_name" : "The Battle for Wesnoth Project" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player content." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "Code Injection" } ] } ] }, "references" : { "reference_data" : [ { "name" : "https://gist.github.com/shikadiqueen/45951ddc981cf8e0d9a74e4b30400380", "refsource" : "CONFIRM", "url" : "https://gist.github.com/shikadiqueen/45951ddc981cf8e0d9a74e4b30400380" } ] } }