CVE-2023-33245

Опубликовано: 30 мая 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.

Ссылки

https://help.minecraft.net/hc/en-us/articles/16165590199181
Vendor Advisory
https://vuln.ryotak.net/advisories/67
Third Party Advisory
https://www.minecraft.net/ja-jp/article/minecraft-1-20-pre-release-7
Release Notes
https://help.minecraft.net/hc/en-us/articles/16165590199181
Vendor Advisory
https://vuln.ryotak.net/advisories/67
Third Party Advisory
https://www.minecraft.net/ja-jp/article/minecraft-1-20-pre-release-7
Release Notes

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:minecraft:minecraft:*:*:*:*:java:*:*:*

Версия до 1.19 (включая)

cpe:2.3:a:minecraft:minecraft:1.20:pre-release1:*:*:java:*:*:*

cpe:2.3:a:minecraft:minecraft:1.20:pre-release2:*:*:java:*:*:*

cpe:2.3:a:minecraft:minecraft:1.20:pre-release3:*:*:java:*:*:*

cpe:2.3:a:minecraft:minecraft:1.20:pre-release4:*:*:java:*:*:*

cpe:2.3:a:minecraft:minecraft:1.20:pre-release5:*:*:java:*:*:*

cpe:2.3:a:minecraft:minecraft:1.20:pre-release6:*:*:java:*:*:*

EPSS

Процентиль: 67%

0.00532

Низкий

8.8 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

GHSA-47v7-36cr-738c