CVE-2021-35054

Summary (CVE-2021-35054): Minecraft Java Edition (pre-1.17.1) is vulnerable to a directory/path traversal when online-mode=false, allowing deletion of arbitrary JSON files on the host. The root cause is a directory traversal flaw in the affected Minecraft build, enabling unauthorized file deletio...