Unscored CVE-2018-1000824 EUVD-2018-2017GHSA-3j6m-rjrw-hpjc

MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential …

Published Dec 20, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.

References

https://0dd.zone/2018/10/28/megamek-Object-Injection/
https://github.com/MegaMek/megamek/issues/1162