CVE-2023-25303

ALTO 7.1CVE-2023-25303 · Published 04/04/2023 · updated 17/06/2026

In breve

CVE-2023-25303 è una vulnerabilità ALTO (CVSS 7.1) che riguarda atlauncher (atlauncher).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.55%, superiore al 46.4% delle vulnerabilità.
Correzione: aggiornare a 3.4.27.0 o successiva.

Package	Affected versions	Patched versions
atlauncher atlauncher	`< 3.4.27.0`	`3.4.27.0`

Description

ATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.

References

ATLauncher/ATLauncher security advisory · Vendor Advisory
quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free