CVE-2023-29478

2023-04-0700:00:00

mitre

www.cve.org

bibliocraft

path-traversal

vulnerability

filesystem

code execution

minecraft

AI Score

9.8

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution.

References

github.com/Exopteron/BiblioRCE