PT-2023-22192 · Unknown · Silverwaregames.Io

Mesosoi · Published 2023-04-10 · Updated 2023-04-14 · CVE-2023-29192

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SilverwareGames.io versions prior to 1.2.19

Description The issue allows users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19.

Recommendations For versions prior to 1.2.19, update to version 1.2.19 to resolve the issue.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2023-29192

GHSA-M6H6-WPH7-498F

Affected Products

Silverwaregames.Io

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29192.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-29192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29192 · Security Note
• https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-m6h6-wph7-498f · Note
• https://t.me/cibsecurity/61811 · Telegram Post