PT-2025-49805 · Robocode+3 · Robocode+3
CVSS v4.0
10
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red |
Name of the Vulnerable Software and Affected Versions
Robocode version 1.9.3.6
Description
A directory traversal issue exists in the CacheCleaner component. The
recursivelyDelete method does not properly sanitize file paths, potentially allowing attackers to traverse directories and delete arbitrary files on the system. This can be exploited by submitting specially crafted inputs that manipulate the file path, leading to unauthorized file deletions.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the CacheCleaner component or disabling it until a patch is available.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Robocode
Ubuntu