Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
Vulnerability Description
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Crafty Controller 路径遍历漏洞
Vulnerability Description
Crafty Controller是Arcadia的一个 Minecraft 服务器控制面板/启动器。 Crafty Controller存在路径遍历漏洞，该漏洞源于File Operations API Endpoint组件存在输入中和漏洞，可能导致经过身份验证的远程攻击者通过路径遍历进行文件篡改和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A