Description
RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Gotcha Gotcha Games | RPG MAKER MV | 1.6.3 and earlier | — |
| Gotcha Gotcha Games | RPG MAKER MZ | 1.10.0 and earlier | — |