CVE-2023-29478

creationtimestamp| type| source ---|---|--- 2023-04-07 07:26:55+00:00| seen| https://t.me/cibsecurity/61625 2025-02-14 10:04:00+00:00| seen| Telegram/0bb4ickjNVq2KArTNOdzserrohT992e5R5ph1LrWrwSMlxx...

CVE-2023-29478

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution...

CVE-2023-29478

CVE-2023-29478 affects BiblioCraft before 2.4.6. The root cause is failure to sanitize path-traversal characters in filenames, allowing restricted write access across the filesystem (including the Minecraft mods folder) and enabling code execution. Reported in multiple feeds (NVD/Red Hat) with a ...