Approved changes feed: RSS · Atom
cpe:2.3:a:gdevelop:gdevelop:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gdevelop (95267939-db50-52fd-af49-c5a297c0cf95) |
|---|---|
| Product | Gdevelop (26a5f53a-eb12-5826-8a25-5e17c853d8b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-112303 |
vulnerable | 2026-11-03 10:16:28.905934 |
GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs
MEDIUM (4.3)
GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile() to send the cookie to their server and expose private cloud project resources.
Published: 2026-10-19T15:28:54.002Z
Updated: 2026-10-19T18:22:14.926Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.