CVE-2023-25303

2023-04-0400:00:00

mitre

www.cve.org

atlauncher

3.4.26.0

directory traversal

vulnerability

mrpack file

maliciously crafted

arbitrary files

EPSS

0.001

Percentile

30.5%

JSON

ATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.

References

github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6

quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/

EPSS

0.001

Percentile

30.5%

JSON

Related for CVELIST:CVE-2023-25303