CVE-2022-39221

CVE-2022-39221 concerns the McWebserver Minecraft Mod. A path-traversal flaw exists in the McWebserver mod for Fabric and Quilt up to and including 0.1.2.1 and for Forge up to 0.1.1, allowing an attacker to read any files accessible to the mod via HTTP requests. A patch was released in version 0....

PT-2022-24821 · Unknown · Mcwebserver Minecraft Mod

Name of the Vulnerable Software and Affected Versions: McWebserver Minecraft Mod for Fabric and Quilt versions 0.1.2.1 and earlier McWebserver Minecraft Mod for Forge versions 0.1.1 and earlier Description: The McWebserver mod runs a simple HTTP server alongside the Minecraft server in separate...

McWebserver 路径遍历漏洞

McWebserver is a simple web server that runs with the Minecraft server by the individual developer JonasJones. A path traversal vulnerability exists in McWebserver mod for Fabric and Quilt 0.1.2.1 and earlier, and McWebserver Minecraft Mod for Forge 0.1.1 and earlier, which can be exploited by an...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2014:0174-1)

Fix a file conflict between -devel and -headless package - Update to 2.4.4 bnc858818 - changed from xz to gzipped tarball as the first was not available during update - changed a keyring file due release manager change new one is signed by 66484681 from [email protected], see...

Debian DSA-2142-1 : dpkg - directory traversal

Jakub Wilk discovered that the dpkg-source component of dpkg, the Debian package management system, doesn't correctly handle paths in patches of source packages, which could make it traverse directories. Raphael Hertzog additionally discovered that symbolic links in the .pc directory are followed...

[SECURITY] [DSA-2142-1] New dpkg packages fix directory traversal

------------------------------------------------------------------------- Debian Security Advisory DSA-2142-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 06, 2011 http://www.debian.org/security/faq -...