Started by
Omegafanplays
on
Topic category: Troubleshooting, bugs, and solutions
Has MCreator been checked for vulnerability to the Log4J exploit? Does any part of MCreator use Log4J and when Minecraft is launched by MCreator is it launching a known version of Minecraft that has been patched or is it launching minecraft with arguments to disable Log4J?
I'm pretty sure its fine if there was the log4j exploit in mcreator they would have made an announcement
maybe they just dont want us to fear what we dont understand...that mcreator IS the log4j exploit...from the begining of log4j, mcreator was, and from the beginning of log4j mcreator was...
MCreator has the version of log4j that has the exploit, the fixed version comes with the latest release.
We did not urge to update because the exploit itself is not exploitable in the context of the use of the library in MCreator
thank you so much for all your help.