CVE-2008-4243: Epic Games Unreal Tournament 3

High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Affected products

• Epic Games Unreal Tournament 3: version 1.3 only

Published 2008-09-25. Last modified 2026-06-16.