High severity7.1NVD Advisory· Published Apr 4, 2023· Updated Jun 17, 2026
CVE-2023-25303
CVE-2023-25303
Description
ATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:atlauncher:atlauncher:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:atlauncher:atlauncher:*:*:*:*:*:*:*:*range: <3.4.27.0
- (no CPE)range: <=3.4.26.0
- ATLauncher/ATLauncherdescription
Patches
Vulnerability mechanics
References
2- quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/nvdExploitThird Party Advisory
- github.com/ATLauncher/ATLauncher/security/advisories/GHSA-7cff-8xv4-mvx6nvdVendor Advisory
News mentions
0No linked articles in our index yet.