by Kastro
Paper/Archive/CVE-2025-0781

CVE-2025-0781

FlightGear SimGear — Incorrect Authorization in SimGear

EPSS 0.4%CVSS 9.9
critical.is priorityof 100
36
CVSS 9.9 (NVD)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 29.3.293 × 205.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

Affected

ProductAffectedFixed inSource
SimGear≤ 2020.3.19–CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
GitLab (CNA)8.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgitlab.com/flightgear/simgear/-/commit/5bb023647114267141a7610e8f1ca7d6f4f5a5a8refgitlab.com/flightgear/flightgear/-/commit/ad37afce28083fad7f79467b3ffdead753584358refgitlab.com/flightgear/flightgear/-/issues/3025reflists.debian.org/debian-lts-announce/2025/01/msg00028.htmlreflists.debian.org/debian-lts-announce/2025/01/msg00029.html