Skip to content
OpenAdvisories

Vendor

OpenS100 Project

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.6

    OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access

    OpenS100 (the reference implementation S-100 viewer) prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaL_openlibs() without sandboxing or capability restri…