CVE-2023-54396
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2023-54396: high 7.5
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Action: Upgrade pocketmine/pocketmine-mp to 4.8.1 or later.
composer require pocketmine/pocketmine-mp:4.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.1 | - |
Fixed versions
| 4.8.1 |
Sources
- osv: GHSA-wqqv-jcfr-9f5g
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-wqqv-jcfr-9f5g
- https://github.com/pmmp/PocketMine-MP/commit/08b9495bce2d65a6d1d3eeb76e484499a00765eb
- https://github.com/pmmp/PocketMine-MP
- https://github.com/pmmp/PocketMine-MP/blob/38d6284671e8b657ba557e765a6c29b24a7705f5/src/item/Banner.php#L104
CVE-2023-54396 · published · modified · JSON