CVE-2023-29478

CRITICAL 9.8CVE-2023-29478 · Published 07/04/2023 · updated 17/06/2026

In short

CVE-2023-29478 is a CRITICAL (CVSS 9.8) vulnerability affecting bibliocraft (bibliocraftmod).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.9% of all vulnerabilities.
Fix: update to 2.4.6 or later.

Package	Affected versions	Patched versions
bibliocraft bibliocraftmod	`< 2.4.6`	`2.4.6`

Description

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution.

References

Exopteron/BiblioRCE · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free