CVE-2024-46939

Game Extension Engine Path Traversal Vulnerability PUBLISHED

Description (CNA)

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files

Affected (CNA)

Vendor / product	Versions
vivo / Game Extension Engine	affected versions below 1.2.7.0

CWE

CWE-22

References

https://www.vivo.com/en/support/security-advisory-detail?id=13

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.