Wikimedia Scribunto and Luasandbox Vulnerability Allowing Unrestricted File Inclusion

A vulnerability exists in Wikimedia Foundation's Scribunto and Luasandbox components, specifically in certain versions of Scribunto prior to 1.39.16, as well as 1.43.6, 1.44.3, and 1.45.1. The issue also affects Luasandbox versions prior to fea2304f8f6ab30314369a612f4f5b165e68e95a. This vulnerability is related to unrestricted file inclusion in the Lua initialization file, which could potentially be exploited to include arbitrary files and execute malicious code.

Impact

Exploitation of this vulnerability could lead to arbitrary file inclusion, allowing attackers to include and execute files of their choice, potentially leading to further exploitation of the application or server.