CVE-2023-29478 PoC — Minecraft 路径遍历漏洞

Source

Associated Vulnerability

Title:Minecraft 路径遍历漏洞 (CVE-2023-29478)
Description:Minecraft（我的世界）是瑞典Mojang的一款沙盒游戏。 Minecraft BiblioCraft 2.4.6之前版本存在安全漏洞，该漏洞源于没有清理文件名中的路径遍历字符。

Description

CVE-2023-29478 - BiblioCraft File Manipulation/Remote Code Execution exploit affecting BiblioCraft versions prior to v2.4.6

File Snapshot


 [4.0K]  /data/pocs/f3f64b596201709aed2c2161181a713d51b4942b
├── [4.0K]  BiblioPOC
│   ├── [2.1K]  build.gradle
│   ├── [1.2K]  CREDITS-fml.txt
│   ├── [431K]  forge-1.7.10-10.13.4.1614-1.7.10-changelog.txt
│   ├── [4.1K]  ForgeGradle-1.2-20210509.165053-304.pom
│   ├── [4.0K]  gradle
│   │   └── [4.0K]  wrapper
│   │       ├── [ 53K]  gradle-wrapper.jar
│   │       └── [ 231]  gradle-wrapper.properties
│   ├── [5.2K]  gradlew
│   ├── [2.2K]  gradlew.bat
│   ├── [4.0K]  src
│   │   └── [4.0K]  main
│   │       ├── [4.0K]  java
│   │       │   └── [4.0K]  com
│   │       │       └── [4.0K]  exopteron
│   │       │           └── [4.0K]  forgemodnew
│   │       │               ├── [4.0K]  JarPOCCommand.java
│   │       │               ├── [8.8K]  POCExploitCommand.java
│   │       │               ├── [1.4K]  TestMod.java
│   │       │               └── [3.7K]  Utils.java
│   │       ├── [4.0K]  makamys
│   │       │   └── [4.0K]  coretweaks
│   │       │       └── [4.0K]  optimization
│   │       │           └── [4.0K]  transformercache
│   │       │               └── [4.0K]  lite
│   │       │                   └── [1.2K]  TransformerCache.java
│   │       └── [4.0K]  resources
│   │           ├── [ 300]  mcmod.info
│   │           └── [4.0K]  META-INF
│   │               └── [   0]  test_at.cfg
│   └── [4.0K]  tools
│       ├── [2.7K]  asciijar1.py
│       ├── [ 20K]  compress.py
│       ├── [1.7K]  create_payload.py
│       └── [3.2K]  paddingzip.py
├── [4.0K]  BiblioPOC1.12.2
│   ├── [4.7K]  build.gradle
│   ├── [3.2K]  changelog.txt
│   ├── [3.2K]  CREDITS.txt
│   ├── [4.0K]  gradle
│   │   └── [4.0K]  wrapper
│   │       ├── [ 53K]  gradle-wrapper.jar
│   │       └── [ 200]  gradle-wrapper.properties
│   ├── [ 236]  gradle.properties
│   ├── [5.2K]  gradlew
│   ├── [2.2K]  gradlew.bat
│   ├── [1.5K]  LICENSE-Paulscode IBXM Library.txt
│   ├── [2.7K]  LICENSE-Paulscode SoundSystem CodecIBXM.txt
│   ├── [ 27K]  LICENSE.txt
│   └── [4.0K]  src
│       └── [4.0K]  main
│           ├── [4.0K]  java
│           │   └── [4.0K]  com
│           │       └── [4.0K]  exopteron
│           │           └── [4.0K]  bibliopoc1122
│           │               ├── [ 800]  BiblioPOC.java
│           │               ├── [3.5K]  JarPOCCommand.java
│           │               └── [3.5K]  Utils.java
│           └── [4.0K]  resources
│               ├── [ 293]  mcmod.info
│               └── [ 406]  pack.mcmeta
├── [6.8K]  CORETWEAKS_METHOD.MD
├── [5.2K]  README.MD
├── [5.5K]  screenshot1.png
└── [ 17K]  screenshot2.png

27 directories, 39 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!