NuGet/Tgstation.Server.Host CVE-2024-41799: high 8.4, EPSS 1.21%
tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users
Action: Upgrade Tgstation.Server.Host to 6.8.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 6.8.0 | - |
Fixed versions
| 6.8.0 |
Sources
- osv: GHSA-c3h4-9gc2-f7h4#NuGet/Tgstation.Server.Host
- https://github.com/tgstation/tgstation-server/security/advisories/GHSA-c3h4-9gc2-f7h4
- https://nvd.nist.gov/vuln/detail/CVE-2024-41799
- https://github.com/tgstation/tgstation-server/pull/1835
- https://github.com/tgstation/tgstation-server/commit/374852fe5ae306415eb5aafb2d16b06897d7afe4
- https://github.com/tgstation/tgstation-server
CVE-2024-41799 · published · modified · JSON