CVE-2023-33245
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-05-20 CVE Reserved
- 2023-05-30 CVE Published
- 2025-01-10 CVE Updated
- 2025-02-16 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://vuln.ryotak.net/advisories/67 | Third Party Advisory | |
| https://www.minecraft.net/ja-jp/article/minecraft-1-20-pre-release-7 | Release Notes |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://help.minecraft.net/hc/en-us/articles/16165590199181 | 2023-06-05 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Minecraft Search vendor "Minecraft" | Minecraft Search vendor "Minecraft" for product "Minecraft" | <= 1.19 Search vendor "Minecraft" for product "Minecraft" and version " <= 1.19" | java |
Affected
| ||||||
| Minecraft Search vendor "Minecraft" | Minecraft Search vendor "Minecraft" for product "Minecraft" | 1.20 Search vendor "Minecraft" for product "Minecraft" and version "1.20" | pre-release1, java |
Affected
| ||||||
| Minecraft Search vendor "Minecraft" | Minecraft Search vendor "Minecraft" for product "Minecraft" | 1.20 Search vendor "Minecraft" for product "Minecraft" and version "1.20" | pre-release2, java |
Affected
| ||||||
| Minecraft Search vendor "Minecraft" | Minecraft Search vendor "Minecraft" for product "Minecraft" | 1.20 Search vendor "Minecraft" for product "Minecraft" and version "1.20" | pre-release3, java |
Affected
| ||||||
| Minecraft Search vendor "Minecraft" | Minecraft Search vendor "Minecraft" for product "Minecraft" | 1.20 Search vendor "Minecraft" for product "Minecraft" and version "1.20" | pre-release4, java |
Affected
| ||||||
| Minecraft Search vendor "Minecraft" | Minecraft Search vendor "Minecraft" for product "Minecraft" | 1.20 Search vendor "Minecraft" for product "Minecraft" and version "1.20" | pre-release5, java |
Affected
| ||||||
| Minecraft Search vendor "Minecraft" | Minecraft Search vendor "Minecraft" for product "Minecraft" | 1.20 Search vendor "Minecraft" for product "Minecraft" and version "1.20" | pre-release6, java |
Affected
| ||||||