CVE-2007-5742: Wesnoth

High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.

Affected products

• Wesnoth Wesnoth: version 0.2.1 only; version 0.3 only; version 0.3.1 only; version 0.3.2 only; version 0.3.3 only; version 0.3.4 only; …

Published 2007-12-01. Last modified 2026-06-16.