Vulnerabilities

TI-2023-16417 CVE-2023-33245 · GHSA-47v7-36cr-738c

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file…

MEDIUM 42

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00872 Published 2023-05-30 No fix listed CWE-59

TI-2022-07875 CVE-2022-23884 · GHSA-wvm2-72hm-jh6v

Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a…

MEDIUM 47

Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deserializer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02585 Published 2022-03-28 No fix listed CWE-190

TI-2021-14016 CVE-2021-35054 · GHSA-65hc-vfvw-w6rc

Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for…

LOW 36

Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0143 Published 2021-07-20 No fix listed CWE-22

Vulnerabilities

Filters

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file…

Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a…

Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for…