CVE-2023-25303

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

EUVD-2023-29265

Malicious code in bioql PyPI...

CVE-2023-25303

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25303

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

Directory traversal

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25303

Summary: ATLauncher

ATLauncher 路径遍历漏洞

ATLauncher is the launcher for Minecraft. A security vulnerability exists in ATLauncher 3.4.26.0 and earlier versions, which stems from a directory traversal vulnerability that can be exploited by an attacker to craft mrpack files to create arbitrary files outside of the installation directory...

PT-2023-20017 · Unknown · Atlauncher

Name of the Vulnerable Software and Affected Versions: ATLauncher versions 3.4.26.0 and earlier Description: The issue allows a maliciously crafted mrpack file to create arbitrary files outside of the installation directory due to a Directory Traversal weakness. Recommendations: For ATLauncher...

CVE-2023-25303

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25303

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

@atlauncher/atlauncher-scripts (>=0.1.0-18 <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939 <=0.5.1-master.20181101044648) +415 more potentially affected by CVE-2018-16487 +1 more via lodash.merge (>=4.0.1 <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory:...