Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| net.sf.robocode:robocode.host(Maven) | 0 | 1.9.3.7 | N/A |
CVSS Metrics
