title: SilverwareGames.io users with access to the game upload panel are able to edit download links for games uploaded by other developers
description: SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19.
problem types: CWE-668: Exposure of Resource to Wrong Sphere
affected:
{
vendor: mesosoi
product: silverwaregames-io-issue-tracker
versions:
version: < 1.2.19, status: affected
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 2.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
version: 3.1
]