Luke100000 / ImmersivePaintings

Minecraft mod. Use your own paintings! Drag and drop! In Multiplayer!
GNU General Public License v3.0
11 stars 16 forks source link

Arbitrary Code Execution Vulnerability #47

Closed ryleu closed 11 months ago

ryleu commented 11 months ago

The vulnerability is caused by an unsafe use of the Java serialization feature in network packets sent by servers to clients or clients to servers that allows to instantiate any Java class that is loaded in the Minecraft instance.

This mod is completely unsafe and should not be used until this issue is patched.