CVE-2023-37262 CC: Tweaked SSRF to Cloud Services Metadata Services not Blocked by Default

🗓️ 07 Jul 2023 20:17:42Reported by GoogleType

osv🔗 osv.dev👁 26 Views

Prior to certain versions, the CC: Tweaked Minecraft plugin allowed access to sensitive information via metadata service APIs on popular cloud hosting providers, potentially leading to privilege escalation

Reporter	Title	Published	Views	Family All 8
CNNVD	Tweaked 代码问题漏洞	7 Jul 202300:00	–	cnnvd
CVE	CVE-2023-37262	7 Jul 202320:17	–	cve
Cvelist	CVE-2023-37262 CC: Tweaked SSRF to Cloud Services Metadata Services not Blocked by Default	7 Jul 202320:17	–	cvelist
EUVD	EUVD-2023-41180	3 Oct 202520:07	–	euvd
NVD	CVE-2023-37262	7 Jul 202321:15	–	nvd
Prion	Default credentials	7 Jul 202321:15	–	prion
RedhatCVE	CVE-2023-37262	23 May 202504:03	–	redhatcve
Vulnrichment	CVE-2023-37262 CC: Tweaked SSRF to Cloud Services Metadata Services not Blocked by Default	7 Jul 202320:17	–	vulnrichment

Source	Link
github	www.github.com/cc-tweaked/CC-Tweaked/blob/96847bb8c28df51e5e49f2dd2978ff6cc4e2821b/projects/core/src/main/java/dan200/computercraft/core/apis/http/options/AddressPredicate.java
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37262.json
github	www.github.com/MightyPirates/OpenComputers/security/advisories/GHSA-vvfj-xh7c-j2cm
github	www.github.com/cc-tweaked/CC-Tweaked/security/advisories/GHSA-7p4w-mv69-2wm2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-37262
github	www.github.com/dan200/ComputerCraft/issues/170
github	www.github.com/cc-tweaked/CC-Tweaked/commit/4bbde8c50c00bc572578ab2cff609b3443d10ddf

02 Apr 2026 09:08Current

8.6High risk

Vulners AI Score8.6

CVSS 3.19.6

EPSS0.0045