Ignacio R. Morelle

2 exploits Active since Sep 2017
CVE-2015-5069 WRITEUP MEDIUM WRITEUP
Battle for Wesnoth < 1.12.3 and 1.13.x < 1.13.1 - Exposure of Sensitive Information via .pbl File Inclusion
The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML.
CVSS 4.3
CVE-2015-5070 WRITEUP LOW WRITEUP
Battle for Wesnoth < 1.12.4 and 1.13.x < 1.13.1 - Sensitive Information Exposure via .pbl File Inclusion
The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5069.
CVSS 3.1