Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2mxr-rc97-xrj2

Опубликовано: 09 дек. 2025
Источник: github
Github: Прошло ревью
CVSS4: 9.3

Описание

Robocode has an insecure temporary file creation vulnerability in the AutoExtract component

An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.

Пакеты

Наименование

net.sf.robocode:robocode.battle

maven
Затронутые версииВерсия исправления

< 1.9.5.6

1.9.5.6

EPSS

Процентиль: 19%
0.00062
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-377

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 2 месяцев назад

An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.

CVSS3: 8.1
nvd
около 2 месяцев назад

An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.

CVSS3: 8.1
debian
около 2 месяцев назад

An insecure temporary file creation vulnerability exists in the AutoEx ...

EPSS

Процентиль: 19%
0.00062
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-377