Vendor
crafatar
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5
Crafatar path traversal vulnerability
Crafatar serves Minecraft avatars based on the skin for use in external applications. Files outside of the `lib/public/` directory can be requested from the server. Instances running behind Cloudflare (including crafatar.com) are not affected. Instances using…