High severity8.8NVD Advisory· Published May 30, 2023· Updated Jun 17, 2026
CVE-2023-33245
CVE-2023-33245
Description
Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:minecraft:minecraft:*:*:*:*:java:*:*:*+ 7 more
- cpe:2.3:a:minecraft:minecraft:*:*:*:*:java:*:*:*range: <=1.19
- cpe:2.3:a:minecraft:minecraft:1.20:pre-release1:*:*:java:*:*:*
- cpe:2.3:a:minecraft:minecraft:1.20:pre-release2:*:*:java:*:*:*
- cpe:2.3:a:minecraft:minecraft:1.20:pre-release3:*:*:java:*:*:*
- cpe:2.3:a:minecraft:minecraft:1.20:pre-release4:*:*:java:*:*:*
- cpe:2.3:a:minecraft:minecraft:1.20:pre-release5:*:*:java:*:*:*
- cpe:2.3:a:minecraft:minecraft:1.20:pre-release6:*:*:java:*:*:*
- (no CPE)range: <=1.19, <1.20 pre-releases before 7
- Minecraft/Minecraftdescription
Patches
Vulnerability mechanics
References
3- help.minecraft.net/hc/en-us/articles/16165590199181nvdVendor Advisory
- vuln.ryotak.net/advisories/67nvdThird Party Advisory
- www.minecraft.net/ja-jp/article/minecraft-1-20-pre-release-7nvdRelease Notes
News mentions
0No linked articles in our index yet.