[CVE-2023-54393] PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON p…

Descripción técnica

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Debilidades (CWE)

CWE-20

Fuente oficial

Publicado en NIST NVD.