CVE-2023-29192

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-668

Affected software

Vendor	Product	Versions
mesosoi	silverwaregames-io-issue-tracker	< 1.2.19

References

https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-m6h6-wph7-498fThird Party Advisory
https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-m6h6-wph7-498fThird Party Advisory

Timeline

Published: Apr 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-291937.5SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. Th CVE-2023-291942.7Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace co CVE-2023-291954.3Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can eith CVE-2023-291966.1Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default install of Discourse. A CVE-2023-291977.5guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker CVE-2023-291988.5Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps using `contex CVE-2023-2919910.0There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers CVE-2023-292006.5Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system CVE-2023-292019.0XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, CVE-2023-292029.0XWiki Commons are technical libraries common to several other top level XWiki projects. The RSS macro that is bundled in XWiki included the CVE-2023-292035.3XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally no CVE-2023-292046.1XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measu