CVE-2015-5069

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.71%

Published

Sep 26, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML.

Weaknesses (CWE)

CWE-200

Affected Products (4)

wesnoth · battle_for_wesnothvulnerable

fedoraproject · fedoravulnerable

References (18)

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161722.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161752.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/06/25/12

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/75424

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1236010

KEV Catalog EPSS Scores Vendors All CVEs