Lucene search
GoogleOSV:CVE-2021-39177HistoryAug 30, 2021 - 11:15 p.m.
CVE-2021-39177
2021-08-3023:15:07
Google
osv.dev
3
geyser
minecraft
security
Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Versions of Geyser prior to 1.4.2-SNAPSHOT allow anyone that can connect to the server to forge a LoginPacket with manipulated JWT token allowing impersonation as any user. Version 1.4.2-SNAPSHOT contains a patch for the issue. There are no known workarounds aside from upgrading.
Related
prion
prion
Design/Logic Flaw
2021-08-30 23:15:00
osv
osv
User impersonation due to incorrect handling of the login JWT
2021-09-07 23:04:04
nvd
nvd
CVE-2021-39177
2021-08-30 23:15:07
cve
cve
CVE-2021-39177
2021-08-30 23:15:07
cvelist
cvelist
CVE-2021-39177 User impersonation due to incorrect handling of the login JWT
2021-08-30 23:00:12
github
github
User impersonation due to incorrect handling of the login JWT
2021-09-07 23:04:04