Vulnerabilities > Minecraft > Minecraft

DATE CVE VULNERABILITY TITLE RISK
2023-05-30 CVE-2023-33245 Link Following vulnerability in Minecraft
Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.
network
low complexity
minecraft CWE-59
8.8
2021-07-20 CVE-2021-35054 Path Traversal vulnerability in Minecraft
Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.
network
minecraft CWE-22
4.3