Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.3

MinigameCenter: Unrestricted URL Loading Puts Sensitive Data at Risk

CVE-2024-13185 · published 1 year ago
Summary

The MinigameCenter module does not properly control what URLs can be loaded, which can allow an attacker to access sensitive information. This could potentially expose user data or compromise the security of your system. To protect your users, update your MinigameCenter module to ensure that only trusted URLs can be loaded.

Original advisory text
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
6.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published8 Jan 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-13185 · NVD
Track software like this
Free during beta