BiblioRCE

BiblioCraft 中的一个缺陷，允许受限的服务器端文件操作。 此方法仅需要 BiblioCraft！无需太多技巧，也无需其他模组即可实现代码执行！ CoreTweaks 关于 CoreTweaks 的原始文章可在此处找到 这里。我建议您先阅读此内容，因为我可能会跳过一些下面重要的细节。 影响 可通过多种方法实现代码执行。 这影响 BiblioCraft 1.7.10 v1.11.7 和 BiblioCraft 1.12.2 v2.4.5（已确认），很可能也影响所有 v2.4.6 之前的 BiblioCraft 版本（未确认，未测试）...

CVE-2023-29478

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution...

EUVD-2023-33046

Malicious code in bioql PyPI...

CVE-2023-29478

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution...

Path traversal

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution...

Minecraft 路径遍历漏洞

Minecraft My World is a Swedish sandbox game by Mojang. A security vulnerability exists in Minecraft BiblioCraft versions prior to 2.4.6 that stems from not cleaning up path traversal characters in filenames...

CVE-2023-29478

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution...

CVE-2023-29478

CVE-2023-29478 affects BiblioCraft before 2.4.6. The root cause is failure to sanitize path-traversal characters in filenames, allowing restricted write access across the filesystem (including the Minecraft mods folder) and enabling code execution. Reported in multiple feeds (NVD/Red Hat) with a ...

PT-2023-22274 · Unknown · Bibliocraft

Name of the Vulnerable Software and Affected Versions: BiblioCraft versions prior to 2.4.6 Description: The issue allows restricted write access to almost anywhere on the filesystem due to a failure to sanitize path-traversal characters in filenames. This can include the Minecraft mods folder,...

CVE-2023-29478

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution...