← Database

CVE-2023-25305

HIGH CVSS: 7.1 Published: 2023-04-04 Modified: 2026-06-17

Description

PolyMC Launcher <= 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.

Affected Platforms

Polymc Polymc

Weakness Type

CWE-22, CWE-22

References