Vendor
OpenS100 Project
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.6
OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access
OpenS100 (the reference implementation S-100 viewer) prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaL_openlibs() without sandboxing or capability restri…