high7.5
CVE-2022-51009
PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data.
Impact
PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with invalid geometry JSON to trigger an unhandled RuntimeException, causing server crash.
Affected products
| Product | Affected versions |
|---|---|
| PocketMine-MP | before 4.7.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.