Approved changes feed: RSS · Atom

cpe:2.3:a:mcwebserver_minecraft_mod_for_forge_project:mcwebserver_minecraft_mod_for_forge:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcwebserver Minecraft Mod For Forge Project (6f87d5c0-3e3b-5b91-b872-509520ea0fd7)
ProductMcwebserver Minecraft Mod For Forge (f99d0c11-7977-5f6e-9e4a-e8f49d87792b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/j-onasjones/mcwebserver purl2cpe 2026-06-01 10:12:14.293663

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-39221 vulnerable 2026-06-08 05:47:18.372984 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod
HIGH (7.5)
McWebserver mod runs a simple HTTP server alongside the Minecraft server in seperate threads. Path traversal in McWebserver Minecraft Mod for Fabric and Quilt up to and including 0.1.2.1 and McWebserver Minecraft Mod for Forge up to and including 0.1.1 allows all files, accessible by the program, to be read by anyone via HTTP request. Version 0.2.0 with patches are released to both platforms (Fabric and Quilt, Forge). As a workaround, the McWebserver mod can be disabled by removing the file from the `mods` directory.
Published: 2022-09-20T23:25:08.000Z
Updated: 2025-04-23T16:56:47.480Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.