wesnoth/wesnoth

wesnoth/wesnoth

www.wesnoth.org

Releases391

Frequency3 weeks 5 hours

Last Release 17 days ago

Stars6.67K

An open source, turn-based strategy game with a high fantasy theme.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2015-5069 ↗	Sep 26, 2017Tuesday, 26 September 2017, 14:29	—	4 MEDIUM
The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML.
CVE-2015-5070 ↗	Sep 26, 2017Tuesday, 26 September 2017, 14:29	—	3.5 LOW
The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5069.