exploitDog

CVE-2023-25303

Опубликовано: 04 апр. 2023

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

ATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.

Ссылки

https://github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6
Vendor Advisory
https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/
Exploit
Third Party Advisory
https://github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6
Vendor Advisory
https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:atlauncher:atlauncher:*:*:*:*:*:*:*:*

Версия до 3.4.27.0 (исключая)

EPSS

Процентиль: 64%

0.00468

Низкий

7.1 High

CVSS3

Дефекты

CWE-22

CWE-22

EPSS

Процентиль: 64%

0.00468

Низкий

7.1 High

CVSS3

Дефекты

CWE-22

CWE-22