Approved changes feed: RSS · Atom

cpe:2.3:a:wesnoth:the_battle_for_wesnoth:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWesnoth (296a97a2-0e03-535a-8cc1-e8c0cef088e1)
ProductThe Battle For Wesnoth (3da3e637-4e6a-569c-ab92-0d98f9c45864)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/wesnoth-1.12 purl2cpe 2026-06-01 10:12:15.556090
pkg:deb/ubuntu/wesnoth-1.12 purl2cpe 2026-06-01 10:12:15.556094
pkg:github/wesnoth/wesnoth purl2cpe 2026-06-01 10:12:15.556098
pkg:rpm/fedora/wesnoth purl2cpe 2026-06-01 10:12:15.556101
pkg:rpm/opensuse/wesnoth purl2cpe 2026-06-01 10:12:15.556105
pkg:sourceforge/wesnoth purl2cpe 2026-06-01 10:12:15.556108

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1999023 vulnerable 2026-06-08 05:11:15.115337 Details available
The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player content.
Published: 2018-07-23T16:00:00.000Z
Updated: 2024-09-17T03:18:33.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.