Required CVE Record Information
Description
NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 3.9 | LOW | 3.1 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N |
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.