| Package | Affected versions | Patched versions |
|---|---|---|
| bibliocraft | < 2.4.6 | 2.4.6 |
BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free