Minecraft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Minecraft records in CISA KEV

No Minecraft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Minecraft 2 records MEDIUM Bedrock Server 1 record MEDIUM

Records

2 records in Minecraft · all components

TI-2023-16417 CVE-2023-33245 · GHSA-47v7-36cr-738c

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file…

MEDIUM 42

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00872 Published 2023-05-30 No fix listed CWE-59

TI-2021-14016 CVE-2021-35054 · GHSA-65hc-vfvw-w6rc

Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for…

LOW 36

Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0143 Published 2021-07-20 No fix listed CWE-22

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0