Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading ~ (tilde) characters to home-directory pathnames but does not restrict use of these characters in strings received from the network, which might allow remote attackers to conduct absolute path traversal attacks and overwrite arbitrary files via a ~ in a pathname that is used for a file transfer in an Internet game, a different vulnerability than CVE-2011-1932.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Widelands ‘io/filesystem/filesystem.cc’路径遍历漏洞
Vulnerability Description
Widelands 15.1之前版本的io/filesystem/filesystem.cc的路径名规范化功能中存在漏洞。当其引导~（波浪号）扩展到主目录路径名，并且对从网络接收到的字符串中的字符使用没有限制时，远程攻击者可以借助网游文件转换器使用的路径名中的 “~ ”来执行绝对路径遍历攻击和覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A