← Database

CVE-2007-5742

CRITICAL CVSS: 9.0 Published: 2007-12-01 Modified: 2026-06-16

Description

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.

Affected Platforms

Wesnoth Wesnoth

Weakness Type

CWE-22

References