Security Advisory
CVE-2021-47742
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Epic Games Psyonix Rocket League <=1.95 contains an insecure permissions vulnerability that allows authenticated users to modify executable files with full access permissions. Attackers can leverage the F (Full) flag for the Authenticated Users group to change executable files and potentially escalate system privileges.