> CVE-2025-31488

« BACK_TO_HOME
PUBLISHED
2025-04-06 20:15
MODIFIED
2025-04-07 14:17
EPSS (Prob. Exploit)
0.19%
Top 91.9%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

Plain Craft Launcher (PCL) is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE background to access the specified webpage without knowing it. This vulnerability is fixed in 2.9.3.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser

AFFECTED PACKAGES:
Unknown / Unknown
53 versions affected
ALIASES:
GHSA-wfpw-hfcp-9m73

> HISTORIQUE DES MODIFICATIONS

Première apparition
06/04/2025 20:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:02
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME