CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

PT-2023-20018 · Unknown · Prism Launcher

Name of the Vulnerable Software and Affected Versions: Prism Launcher versions up to v6.1 Description: The issue allows attackers to perform a directory traversal via importing a crafted .mrpack file. This can be exploited by importing a specifically designed .mrpack file, potentially leading to...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

mrpack-install vulnerable to path traversal with dependency

Impact Importing a malicious .mrpack file can cause path traversal while downloading files. This can lead to scripts or config files being placed or replaced at arbitrary locations, without the user noticing. Patches No patches yet. Workarounds Avoid importing .mrpack files from untrusted sources...

PT-2023-20021 · Unknown · Mrpack-Install

Name of the Vulnerable Software and Affected Versions: mrpack-install versions 0.16.2 and earlier Description: The issue allows an attacker to perform a Directory Traversal attack by importing a malicious .mrpack file. This can cause scripts or config files to be placed or replaced at arbitrary...