ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability
ZDI disclosed an unpatched Genesis World URDF traversal information-disclosure flaw rated CVSS 5.5.
ZDI published ZDI-26-754, an unpatched directory traversal information-disclosure flaw in Genesis World’s URDF handling. Remote attackers can disclose sensitive information on affected installations, though interaction with the library is required. ZDI assigned CVSS 5.5. No CVE or in-the-wild exploitation is mentioned.
- Unpatched ZDI-26-754 affects Genesis World URDF handling.
- Directory traversal can disclose sensitive information.
- Library interaction is required; ZDI rates it CVSS 5.5.
- No CVE or confirmed exploitation is reported.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 5.5.
This source does not provide full text. Read it at zerodayinitiative.com.