CVE-2023-37261

CVSS Score of 10 (low)

Details

Published Jul 7, 2023
Updated: Jul 18, 2023
CWE ID 918

Summary

CVE-2023-37261 is a vulnerability affecting OpenComputers, a Minecraft mod that adds programmable computers and robots to the game. The vulnerability exists in every version of OpenComputers with the Internet Card feature enabled, specifically from version 1.2.0 to 1.8.3 in their default configurations. If the mod is installed on a Minecraft server hosted on popular cloud hosting providers like AWS, GCP, and Azure, the metadata services' API endpoints are not blacklisted by default, allowing any player to access sensitive information exposed via those servers. This could potentially lead to privilege escalation or pivoting into the hosting provider's systems. Additionally, IPv6 addresses are not properly filtered, granting players on a server using OpenComputers computers broader access into the local IPv6 network and potentially retrieving sensitive information from both private IPv4 and IPv6 address spaces.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-37261 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options