Design/Logic Flaw

In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting...

CVE-2019-12395

The CVE-2019-12395 vulnerability affects Webbukkit Dynmap 3.0-beta-3 and earlier, where a missing login check in servlet/MapStorageHandler.java allows an attacker to view a map image without authentication even when login-required is enabled. The issue enables unauthorized access to map visuals a...