CVE-2023-25304 — HIGH (7.8)

Q: What is CVE-2023-25304?

CVE-2023-25304 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file.

Q: How severe is CVE-2023-25304?

CVE-2023-25304 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-25304?

Check the references section above for vendor advisories and patch information. Affected products include: Prismlauncher Prism Launcher.

Vulnerability Description

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Prismlauncher	Prism Launcher	<= 6.1

Related Weaknesses (CWE)

CWE-22

References

https://github.com/PrismLauncher/PrismLauncher/security/advisories/GHSA-wxgx-8v3Vendor Advisory
https://github.com/PrismLauncher/PrismLauncher/security/advisories/GHSA-wxgx-8v3Vendor Advisory

FAQ

What is CVE-2023-25304?

CVE-2023-25304 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file.

How severe is CVE-2023-25304?

CVE-2023-25304 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-25304?

Check the references section above for vendor advisories and patch information. Affected products include: Prismlauncher Prism Launcher.