PT-2024-36612 · Unknown · Playloom Engine

Published 2024-12-13 · Updated 2024-12-16 · CVE-2024-55946

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Playloom Engine version 0.0.1

Description The issue is related to data storage, specifically when using the collaboration features in Playloom Engine. When collaborating with another user, they may have access to personal information entered into the software, posing a risk to user privacy. The collaboration feature has been temporarily disabled by the maintainers until a fix can be implemented.

Recommendations For Playloom Engine version 0.0.1, refrain from using the collaboration feature until the release of version 0.0.2, which is expected to contain a patch addressing this issue. As a temporary workaround, consider avoiding the use of the collaboration feature to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-55946

GHSA-75GM-RC5Q-6JWV

Affected Products

Playloom Engine

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-55946 · Security Note
• https://osv.dev/vulnerability/CVE-2024-55946 · Vendor Advisory
• https://github.com/Quetrobits/Playloom-Engine/security/advisories/GHSA-75gm-rc5q-6jwv · Note
• https://twitter.com/CveFindCom/status/1867676217584857127 · Twitter Post
• https://twitter.com/SystemTek_UK/status/1868574584514941379 · Twitter Post
• https://t.me/cvedetector/12903 · Telegram Post
• https://twitter.com/CVEnew/status/1867908503555154059 · Twitter Post