CVE-2022-51010
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2022-51010: high 7.5, EPSS 0.51%
Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP
Action: Upgrade pocketmine/pocketmine-mp to 4.4.2 or later.
composer require pocketmine/pocketmine-mp:4.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0-BETA5 | 4.4.2 | - |
Fixed versions
| 4.4.2 |
Sources
- osv: GHSA-fqx3-r75h-vc89
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-fqx3-r75h-vc89
- https://github.com/pmmp/PocketMine-MP/commit/5fd685e07d61ef670584ed11a52fd5f4b99a81a7
- https://github.com/pmmp/PocketMine-MP/commit/8ac16345a3bc099b62c1f5cfbf3b736e621c3f76
- https://github.com/pmmp/PocketMine-MP
CVE-2022-51010 · published · modified · JSON