ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability
ZDI discloses an unpatched Genesis World directory traversal that can leak sensitive information.
The Zero Day Initiative published ZDI-26-753, an unpatched directory-traversal flaw in Genesis World that can disclose sensitive information. Exploitation requires interaction with the MJCF library, and the attack vector depends on how the library is implemented. ZDI rated the issue CVSS 5.5. The advisory does not name a CVE or report observed exploitation.
34