What’s Vulnerable › Vulnerabilities

CVE-2023-33245

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-30 · updated 2026-06-17
• Weakness: CWE-59

Description

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.

Affected products

• Minecraft: through 1.19; 1.20-pre-release1, 1.20-pre-release2, 1.20-pre-release3, 1.20-pre-release4, 1.20-pre-release5, 1.20-pre-release6

References

• https://help.minecraft.net/hc/en-us/articles/16165590199181
• https://vuln.ryotak.net/advisories/67
• https://www.minecraft.net/ja-jp/article/minecraft-1-20-pre-release-7
• https://help.minecraft.net/hc/en-us/articles/16165590199181
• https://vuln.ryotak.net/advisories/67
• https://www.minecraft.net/ja-jp/article/minecraft-1-20-pre-release-7

Get alerted when CVE-2023-33245 or the next vulnerability affects your stack