Vulnerabilities > CVE-2023-37262 - Server-Side Request Forgery (SSRF) vulnerability in Tweaked Cc-Tweaked

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

tweaked

CWE-918

NVD

Published: 2023-07-07

Updated: 2023-07-18

Summary

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to versions 1.20.1-1.106.0, 1.19.4-1.106.0, 1.19.2-1.101.3, 1.18.2-1.101.3, and 1.16.5-1.101.3, if the cc-tweaked plugin is running on a Minecraft server hosted on a popular cloud hosting providers, like AWS, GCP, and Azure, those metadata services API endpoints are not forbidden (aka "blacklisted") by default. As such, any player can gain access to sensitive information exposed via those metadata servers, potentially allowing them to pivot or privilege escalate into the hosting provider. Versions 1.20.1-1.106.0, 1.19.4-1.106.0, 1.19.2-1.101.3, 1.18.2-1.101.3, and 1.16.5-1.101.3 contain a fix for this issue.

Vulnerable Configurations

Part	Description	Count
Application	Tweaked Tweaked CC Tweaked 1.20.1-1.105.0 Tweaked CC Tweaked 1.19.3-1.102.0 Tweaked CC Tweaked 1.19.3-1.102.1 Tweaked CC Tweaked 1.19.3-1.102.2 Tweaked CC Tweaked 1.19.3-1.103.0 Tweaked CC Tweaked 1.19.3-1.103.1 Tweaked CC Tweaked 1.19.4-1.104.0 Tweaked CC Tweaked 1.19.4-1.105.0 Tweaked CC Tweaked 1.19.1-1.100.9 Tweaked CC Tweaked 1.19.2-1.100.10 Tweaked CC Tweaked 1.19.2-1.101.0 Tweaked CC Tweaked 1.19.2-1.101.1 Tweaked CC Tweaked 1.19.2-1.101.2 Tweaked CC Tweaked 1.17.1-1.98.1 Tweaked CC Tweaked 1.17.1-1.98.2 Tweaked CC Tweaked 1.17.1-1.99.0 Tweaked CC Tweaked 1.17.1-1.99.1 Tweaked CC Tweaked 1.17.1-1.100.0 Tweaked CC Tweaked 1.17.1-1.100.1 Tweaked CC Tweaked 1.17.1-1.100.2 Tweaked CC Tweaked 1.17.1-1.100.3 Tweaked CC Tweaked 1.17.1-1.100.4 Tweaked CC Tweaked 1.18-1.99.0 Tweaked CC Tweaked 1.18.1-1.99.1 Tweaked CC Tweaked 1.18.1-1.100.0 Tweaked CC Tweaked 1.18.1-1.100.1 Tweaked CC Tweaked 1.18.1-1.100.2 Tweaked CC Tweaked 1.18.2-1.100.3 Tweaked CC Tweaked 1.18.2-1.100.4 Tweaked CC Tweaked 1.18.2-1.100.5 Tweaked CC Tweaked 1.18.2-1.100.6 Tweaked CC Tweaked 1.18.2-1.100.8 Tweaked CC Tweaked 1.18.2-1.100.9 Tweaked CC Tweaked 1.18.2-1.100.10 Tweaked CC Tweaked 1.18.2-1.101.0 Tweaked CC Tweaked 1.18.2-1.101.2 Tweaked CC Tweaked - Tweaked CC Tweaked 1.4.7-1.105.0 Tweaked CC Tweaked 1.4.7-1.105.1 Tweaked CC Tweaked 1.12.2-1.81.0 Tweaked CC Tweaked 1.12.2-1.81.1 Tweaked CC Tweaked 1.12.2-1.82.0 Tweaked CC Tweaked 1.12.2-1.82.1 Tweaked CC Tweaked 1.12.2-1.82.2 Tweaked CC Tweaked 1.12.2-1.82.3 Tweaked CC Tweaked 1.12.2-1.83.0 Tweaked CC Tweaked 1.12.2-1.83.1 Tweaked CC Tweaked 1.12.2-1.84.0 Tweaked CC Tweaked 1.12.2-1.85.0 Tweaked CC Tweaked 1.12.2-1.85.1 Tweaked CC Tweaked 1.12.2-1.85.2 Tweaked CC Tweaked 1.12.2-1.86.0 Tweaked CC Tweaked 1.12.2-1.86.1 Tweaked CC Tweaked 1.12.2-1.86.2 Tweaked CC Tweaked 1.12.2-1.87.0 Tweaked CC Tweaked 1.12.2-1.88.0 Tweaked CC Tweaked 1.12.2-1.89.0 Tweaked CC Tweaked 1.12.2-1.89.1 Tweaked CC Tweaked 1.12.2-1.89.2 Tweaked CC Tweaked 1.13.2-1.82.0 Tweaked CC Tweaked 1.13.2-1.82.3 Tweaked CC Tweaked 1.13.2-1.83.1 Tweaked CC Tweaked 1.14-1.82.3 Tweaked CC Tweaked 1.14.2-1.83.1 Tweaked CC Tweaked 1.14.3-1.83.1 Tweaked CC Tweaked 1.14.4-1.84.0 Tweaked CC Tweaked 1.14.4-1.84.1 Tweaked CC Tweaked 1.14.4-1.85.0 Tweaked CC Tweaked 1.14.4-1.85.1 Tweaked CC Tweaked 1.14.4-1.85.2 Tweaked CC Tweaked 1.14.4-1.86.0 Tweaked CC Tweaked 1.14.4-1.86.1 Tweaked CC Tweaked 1.14.4-1.86.2 Tweaked CC Tweaked 1.14.4-1.87.0 Tweaked CC Tweaked 1.14.4-1.87.1 Tweaked CC Tweaked 1.14.4-1.88.0 Tweaked CC Tweaked 1.14.4-1.89.0 Tweaked CC Tweaked 1.14.4-1.89.1 Tweaked CC Tweaked 1.14.4-1.89.2 Tweaked CC Tweaked 1.15.2-1.86.2 Tweaked CC Tweaked 1.15.2-1.87.0 Tweaked CC Tweaked 1.15.2-1.87.1 Tweaked CC Tweaked 1.15.2-1.88.0 Tweaked CC Tweaked 1.15.2-1.88.1 Tweaked CC Tweaked 1.15.2-1.89.0 Tweaked CC Tweaked 1.15.2-1.89.1 Tweaked CC Tweaked 1.15.2-1.90.0 Tweaked CC Tweaked 1.15.2-1.90.2 Tweaked CC Tweaked 1.15.2-1.91.0 Tweaked CC Tweaked 1.15.2-1.92.0 Tweaked CC Tweaked 1.15.2-1.93.0 Tweaked CC Tweaked 1.15.2-1.93.1 Tweaked CC Tweaked 1.15.2-1.94.0 Tweaked CC Tweaked 1.15.2-1.95.0 Tweaked CC Tweaked 1.15.2-1.95.1 Tweaked CC Tweaked 1.15.2-1.95.2 Tweaked CC Tweaked 1.15.2-1.95.3 Tweaked CC Tweaked 1.15.2-1.96.0 Tweaked CC Tweaked 1.15.2-1.97.0 Tweaked CC Tweaked 1.15.2-1.97.1 Tweaked CC Tweaked 1.16.1-1.90.0 Tweaked CC Tweaked 1.16.1-1.90.1 Tweaked CC Tweaked 1.16.1-1.90.2 Tweaked CC Tweaked 1.16.1-1.90.3 Tweaked CC Tweaked 1.16.2-1.91.0 Tweaked CC Tweaked 1.16.2-1.91.1 Tweaked CC Tweaked 1.16.3-1.92.0 Tweaked CC Tweaked 1.16.3-1.93.0 Tweaked CC Tweaked 1.16.3-1.93.1 Tweaked CC Tweaked 1.16.4-1.94.0 Tweaked CC Tweaked 1.16.4-1.95.0 Tweaked CC Tweaked 1.16.4-1.95.1 Tweaked CC Tweaked 1.16.4-1.95.2 Tweaked CC Tweaked 1.16.4-1.95.3 Tweaked CC Tweaked 1.16.4-1.96.0 Tweaked CC Tweaked 1.16.5-1.97.0 Tweaked CC Tweaked 1.16.5-1.98.0 Tweaked CC Tweaked 1.16.5-1.98.1 Tweaked CC Tweaked 1.16.5-1.98.2 Tweaked CC Tweaked 1.16.5-1.99.0 Tweaked CC Tweaked 1.16.5-1.99.1 Tweaked CC Tweaked 1.16.5-1.100.0 Tweaked CC Tweaked 1.16.5-1.100.1 Tweaked CC Tweaked 1.16.5-1.100.2 Tweaked CC Tweaked 1.16.5-1.100.3 Tweaked CC Tweaked 1.16.5-1.100.4 Tweaked CC Tweaked 1.16.5-1.100.5 Tweaked CC Tweaked 1.16.5-1.100.6 Tweaked CC Tweaked 1.16.5-1.100.8 Tweaked CC Tweaked 1.16.5-1.100.9 Tweaked CC Tweaked 1.16.5-1.100.10 Tweaked CC Tweaked 1.16.5-1.101.0 Tweaked CC Tweaked 1.16.5-1.101.2	133

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References