Path traversal in McWebserver
Package
mcwebserver
(Fabric and Quilt)
Affected versions
<=0.1.2.1
Patched versions
0.2.0
mcwebserver
(Forge)
<=0.1.1
0.2.0
Path traversal in McWebserver Minecraft Mod for Fabric and Quilt up to and including 0.1.2.1 and McWebserver Minecraft Mod for Forge up to and including 0.1.1 allows all files, accessible by the program, to be read by anyone via HTTP request.
Patches
Version 0.2.0 with patches are released to both platforms (Fabric and Quilt, Forge).
Workarounds
You can disable the McWebserver mod by removing the file from the
modsdirectory.References