CVE-2023-25305

PolyMC Launcher = 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

ATLauncher 路径遍历漏洞

ATLauncher is the launcher for Minecraft. A security vulnerability exists in ATLauncher 3.4.26.0 and earlier versions, which stems from a directory traversal vulnerability that can be exploited by an attacker to craft mrpack files to create arbitrary files outside of the installation directory...

PolyMC Launcher 路径遍历漏洞

PolyMC is a custom launcher for Minecraft that makes it easy to manage multiple installations of Minecraft simultaneously. A security vulnerability exists in PolyMC Launcher 1.4.3 and earlier versions, which stems from a directory traversal vulnerability that can be exploited by an attacker to...

CVE-2023-25305

PolyMC Launcher = 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25303: Improper Limitation of a Pathname to a Restricted Directory

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304: Improper Limitation of a Pathname to a Restricted Directory

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

PT-2023-20018 · Unknown · Prism Launcher

Name of the Vulnerable Software and Affected Versions: Prism Launcher versions up to v6.1 Description: The issue allows attackers to perform a directory traversal via importing a crafted .mrpack file. This can be exploited by importing a specifically designed .mrpack file, potentially leading to...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

mrpack-install vulnerable to path traversal with dependency

Impact Importing a malicious .mrpack file can cause path traversal while downloading files. This can lead to scripts or config files being placed or replaced at arbitrary locations, without the user noticing. Patches No patches yet. Workarounds Avoid importing .mrpack files from untrusted sources...

PT-2023-20021 · Unknown · Mrpack-Install

Name of the Vulnerable Software and Affected Versions: mrpack-install versions 0.16.2 and earlier Description: The issue allows an attacker to perform a Directory Traversal attack by importing a malicious .mrpack file. This can cause scripts or config files to be placed or replaced at arbitrary...