Insufficient type validation in pocketmine/pocketmine-mp

Impact When an inventory interaction is performed e.g. moving an item around an inventory, the client sends a serialized version of the itemstack to the server, which the server then deserializes and compares against its own copy. If the copies don't match, the transaction is invalid. This involv...

PT-2022-28243

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue arises when the client sends a serialized version of the itemstack to the server during an inventory interaction. The server then deserializes this data and compares it against its...