CVE-2023-29478 in BiblioCraft

요약

\~에 의해 MITRE • 2023. 04. 07.

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 예약하다: 2023. 04. 07.
• 공개: 2023. 04. 07.
• 모더레이션: 수락
• 항목: VDB-225195
• CPE: 준비됨
• CWE: CWE-22 (확인됨)
• CVSS: 9.8 (NVD)
• EPSS: 0.01671
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-29478
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-29478
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-29478/