Vulnerability feed

Executive summary

A vulnerability was found in FFXIV Teamcraft, a web application for Final Fantasy XIV players, in versions up to 11.4.31. The advisory text provided is mostly a copied source-code diff and does not state a severity rating or a vendor recommendation.

Technical summary

The advisory text is a copied repository file diff for the comment link pipe and related comment segment files, and it does not describe the vulnerability class in plain words. The diff suggests comment rendering was changed from unsafe HTML binding to rendering comments as plain text segments with safe http and https links, but the advisory does not explicitly state the flaw, attack vector, or preconditions. Affected versions are stated only as up to 11.4.31, and no fixed version is stated. No workaround, detection guidance, CVSS score, or exploitation status is stated.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from github.com/ffxiv-teamcraft/ffxiv-teamcr…66893a132dd81d9cc3dc

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Attack requirements

None

Privileges required

Low

User interaction

Passive

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affects

ffxiv-teamcraftffxiv-teamcraft FFXIV Teamcraft