From c23d9bcc071b8180fad8f246a07cb94f00d721ab Mon Sep 17 00:00:00 2001 From: John <63141077+AconiteX@users.noreply.github.com> Date: Tue, 28 Sep 2021 13:44:52 -0400 Subject: [PATCH] Updated List of Known Exploit Fixes (markdown) --- List-of-Known-Exploit-Fixes.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/List-of-Known-Exploit-Fixes.md b/List-of-Known-Exploit-Fixes.md index b7d2b50..affdf11 100644 --- a/List-of-Known-Exploit-Fixes.md +++ b/List-of-Known-Exploit-Fixes.md @@ -1,3 +1,5 @@ +* ([c2833484](https://github.com/SWG-Source/dsrc/commit/c2833484b1f16b19d03e44e3b57deadd29f79f1a) and [61070d8b](https://github.com/SWG-Source/src/commit/61070d8b6a2a24a510dcedb1004f0fa5c1838fd4) (later adjusted via [e11d527b](https://github.com/SWG-Source/src/commit/e11d527b7a5d999c24f378c4d8fe7406c2b96684))) Addresses a vulnerability in a controller message from the client that allowed sending a message from the client to delete any game object without server-side validation. +* ([65977703](https://github.com/SWG-Source/dsrc/commit/65977703ecac7b9da22625212164002e7b598fda) and [8ed0a7cb](https://github.com/SWG-Source/src/commit/8ed0a7cb673004d483b01690ae650cd05ac306c1)) Addresses a vulnerability in buyback container item transfers. * ([23c8f343](https://github.com/SWG-Source/client-tools/commit/23c8f3430abf6f52e6b82a910f57a1bda65be25f)) Addresses a scripting issue that created a vulnerability in certain client-side admin commands. * ([f8a5b050](https://github.com/SWG-Source/src/commit/f8a5b0505ed957d67ed8df2af4308b8fe2ad0ed4)) Adds additional level of validation to container opening admin commands. * ([62edbcf6](https://github.com/SWG-Source/src/commit/62edbcf662f4252780cf5bed027427d186dc3b97)) Blocks using /open on a crafting tool to get generated items prior to completing the crafting process.