Mojira Archive
MC-62687

Directory traversal possible on world name input box in MCPE

(Note:This affects MCPE, the option for this on the issue log was not present)

On the latest version of MCPE 0.9.4 for Android you can use for example ../../ as the world name. This causes the world files to be generated outside of the games folder. This could be used for malicious purposes.

Invalid

Paul Finnerty

2014-07-20, 12:27 AM

2014-07-20, 11:06 AM

2014-07-20, 11:06 AM

0

2

Unconfirmed

Minecraft 1.7.10

-