high7.5
CVE-2021-35054
Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.
Impact
Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Minecraft | Minecraft | before 1.17.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN53278122/index.html
- https://vuln.ryotak.me/advisories/55
- https://www.minecraft.net/en-us/article/minecraft-java-edition-1-16-5
- http://jvn.jp/en/jp/JVN53278122/index.html
- https://vuln.ryotak.me/advisories/55
- https://www.minecraft.net/en-us/article/minecraft-java-edition-1-16-5