CVE-2022-35978
High
Description
Minetest is a free open-source voxel game engine with easy modding and game creation. In **single player**, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs in is not sandboxed and can directly interfere with the user's system. There are currently no known workarounds.
SeverityHigh
CVSS7.7
Exploit probability—
ProductMinetest
PublishedAug 15, 2022
First seenAug 15, 2022
Weakness typeCWE-693CWE-693
How to fix
Update
- minetest minetest5.6.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| minetest minetest | v < 5.6.0 | 5.6.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.