ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability
ZDI discloses an unpatched Genesis World directory traversal that can leak sensitive information.
The Zero Day Initiative published ZDI-26-753, an unpatched directory-traversal flaw in Genesis World that can disclose sensitive information. Exploitation requires interaction with the MJCF library, and the attack vector depends on how the library is implemented. ZDI rated the issue CVSS 5.5. The advisory does not name a CVE or report observed exploitation.
- ZDI-26-753 is an unpatched directory-traversal information-disclosure flaw.
- Remote attackers need interaction with the Genesis World MJCF library.
- ZDI assigned CVSS 5.5; no CVE or active exploitation is stated.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 5.5.
This source does not provide full text. Read it at zerodayinitiative.com.