CVE-2023-29192 Missing authorization in silverwaregames-io-issue-tracker
Users with upload panel access can modify download links for games uploaded by other developers, compromising data integrity.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-29192?
CVE-2023-29192 is a low-severity missing authorization vulnerability in mesosoi silverwaregames-io-issue-tracker, published on 10 Apr 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19.
Weakness: CWE-668
Which versions are affected by CVE-2023-29192?
It affects 1 product.
Products include Silverwaregames Silverwaregames.
How do I fix CVE-2023-29192?
No fix has been published for CVE-2023-29192 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-29192 being exploited?
There is no known exploitation of CVE-2023-29192 in the wild and no public exploit code.
Other vulnerabilities in mesosoi silverwaregames-io-issue-tracker
- CVE-2022-23543 HTML attributes when attaching a YouTube link to the post
- CVE-2022-36072 SilverwareGames.io used == for hashing instead of ===
- CVE-2023-40179 Silverware Games vulnerable to account enumeration via inconsistent responses
- CVE-2023-40182 Information disclosure in silverwaregames-io-issue-tracker