Path Traversal in Vivo Game Extension Engine

CVE-2024-46939

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.002 (10.3th percentile) — read the EPSS interpretation.