CVE-2023-7332
1 advisory.
Packagist/pocketmine/pocketmine-mp CVE-2023-7332: high 7.5
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
Action: Upgrade pocketmine/pocketmine-mp to 4.18.1 or later.
composer require pocketmine/pocketmine-mp:4.18.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.18.1 | - |
Fixed versions
| 4.18.1 |
Sources
- osv: GHSA-h87r-f4vc-mchv
- https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-h87r-f4vc-mchv
- https://github.com/pmmp/PocketMine-MP/commit/58974765a68f63a9968a7ff3a06f584ff2ee08d2
- https://github.com/pmmp/PocketMine-MP
- https://github.com/pmmp/PocketMine-MP/blob/4.18.1/changelogs/4.18.md#4181
- https://www.cve.org/cverecord?id=CVE-2023-7332
- https://www.vulncheck.com/advisories/pocketmine-mp-improper-validation-of-dropped-item-count-allows-remote-server-crash
CVE-2023-7332 · published · modified · JSON