Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-24781

Malicious users can take over the session of other players

Description

Geon is a board game based on solving questions about the Pythagorean Theorem. Malicious users can obtain the uuid from other users, spoof that uuid through the browser console and become co-owners of the target session. This issue is patched in version 1.1.0. No known workaround exists.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

math-geon Geon

  • < 1.1.0affected

References