CVE-2023-54395: falha de média gravidade em pmmp PocketMine-MP
PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.5%
PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and prevent the server from processing legitimate connections.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
pmmp · PocketMine-MPCVEs relacionadas — pmmp PocketMine-MP
No mesmo produto, das mais perigosas para as menos.
CVE-2024-58381HIGHPocketMine-MP before 5.11.1 Denial of Service via LoginPacketEPSS 0.8%CVE-2022-51015HIGHPocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacketEPSS 0.7%CVE-2026-86200MEDIUMPocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWTEPSS 0.6%CVE-2023-54393HIGHPocketMine-MP before 4.20.5 Denial of Service via LoginPacketEPSS 0.6%CVE-2022-51017HIGHPocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin DataEPSS 0.6%CVE-2026-86201HIGHPocketMine-MP before 5.41.1 LogDoS via LoginPacket clientDataEPSS 0.6%