Unscored CVE-2021-35054 EUVD-2021-21699GHSA-65hc-vfvw-w6rc

Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.

Published Jul 20, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files.

References

https://www.minecraft.net/en-us/article/minecraft-java-edition-1-16-5
https://vuln.ryotak.me/advisories/55
JVN#53278122 third-party-advisory