CVE-2021-39177: Improper Authentication

Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Versions of Geyser prior to 1.4.2-SNAPSHOT allow anyone that can connect to the server to forge a LoginPacket with manipulated JWT token allowing impersonation as any user. Version 1.4.2-SNAPSHOT contains a patch f...

PT-2021-22435

Name of the Vulnerable Software and Affected Versions Geyser versions prior to 1.4.2-SNAPSHOT Description The issue allows anyone that can connect to the server to forge a LoginPacket with a manipulated JWT token, enabling impersonation as any user. This affects users who have saved their...