Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Spacefox1

#38870of 53,624
7.1Total CVSS
Vulnerabilities · 1
PT-2022-16874
7.1
2022-03-24
Geon · Geon · CVE-2022-24781
**Name of the Vulnerable Software and Affected Versions** Geon versions prior to 1.1.0 **Description** The issue allows malicious users to obtain the `uuid` from other users and spoof it through the browser console, becoming co-owners of the target session. This is related to the Geon board game, which focuses on solving questions about the Pythagorean Theorem. **Recommendations** For versions prior to 1.1.0, update to version 1.1.0 to resolve the issue. As a temporary workaround, consider restricting access to the browser console to minimize the risk of `uuid` spoofing.