high7.5
CVE-2023-54390
PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arr…
Impact
PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server.
Affected products
| Product | Affected versions |
|---|---|
| PocketMine-MP | before 5.3.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.