SARA / Free Tools / CVE / CVE-2023-37262

CVE-2023-37262 — CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, a

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to versions 1.20.1-1.106.0, 1.19.4-1.106.0, 1.19.2-1.101.3, 1.18.2-1.101.3, and 1.16.5-1.101.3, if the cc-tweaked plugin is running on a Minecraft server hosted on a popular

CVSS
9.6 CRITICAL
EPSS
0.15% (top 64.40%)
CWE
CWE-918
Published
2023-07-07T20:17:42.919Z
Last modified
2024-11-19T18:38:16.768Z
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

01What is this vulnerability?

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to versions 1.20.1-1.106.0, 1.19.4-1.106.0, 1.19.2-1.101.3, 1.18.2-1.101.3, and 1.16.5-1.101.3, if the cc-tweaked plugin is running on a Minecraft server hosted on a popular cloud hosting providers, like AWS, GCP, and Azure, those metadata services API endpoints are not forbidden (aka…

02Affected products

VendorProductVersions
cc-tweakedCCTweaked — < 1.16.5-1.101.3, >= 1.17.0, < 1.18.2-1.101.3, >= 1.19.0, < 1.19.2-1.101.3, >= 1.19.3, < 1.19.4-1.106.0, >= 1.20.0, < 1.20.1-1.106.0

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →
EPSS detail → Search KEV → Ask SARA →