critical9.8
CVE-2022-24300
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
Impact
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Minetest | Minetest | before 5.4.0 |
| Debian | Debian Linux | Versions 10.0, 11.0 |
References
- NVD record
- CVE.org record
- https://bugs.debian.org/1004223
- https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae
- https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf
- https://www.debian.org/security/2022/dsa-5075
- https://bugs.debian.org/1004223
- https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae
- https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf
- https://www.debian.org/security/2022/dsa-5075