Skip to content
OpenAdvisories

Vendor

GDevelop

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs

    GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing d…