Mehah vulnerabilities
We track 1 vulnerability in Mehah products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 2, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Mehah vulnerabilities
- 9.8 Critical severity
otclient: Improper Neutralization of Special Elements in Output Used by a Downstream Component
OTCLient is an alternative tibia client for otserv. Prior to commit db560de0b56476c87a2f967466407939196dd254, the /mehah/otclient "`Analysis - SonarCloud`" workflow is vulnerable to an expression injection in Actions, allowing an attacker to run commands remot