Description (CNA)
The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of its use of Java serialization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://bdew.net
- https://www.curseforge.com/minecraft/mc-mods/bdlib/files/3331330
- https://vuln.ryotak.me/advisories/46
- https://github.com/bdew-minecraft/bdlib/commit/447210530ceec72fb3374efecb0930ed359d2297
ADP enrichment
No English description supplied.