Description (CNA)
RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Gotcha Gotcha Games Inc. / RPG MAKER MV | affected 1.6.3 and earlier |
| Gotcha Gotcha Games Inc. / RPG MAKER MZ | affected 1.10.0 and earlier |
CWE
CWE-78
References
- https://rpgmakerofficial.com/en/news/4188/
- https://rpgmakerofficial.com/news/4183/
- https://jvn.jp/en/jp/JVN69681784/
ADP enrichment
No English description supplied.
No references supplied.