Insecure Access

2022-02-0806:19:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.5%

JSON

Minetest is vulnerable to insecure access. The vulnerability exists due to a lack of validation allowing an attacker to add or subtract items from a different player’s inventory.

CPENameOperatorVersion
minetest:bookwormeq5.3.0+repack-2.1
minetest:sideq5.3.0+repack-2
minetest:sideq5.3.0+repack-2.1
minetest:sideq5.3.0+repack-1
minetest:bustereq0.4.17.1+repack-1+b1
minetest:bullseyeeq5.3.0+repack-2
minetest:bullseyeeq5.3.0+repack-1
minetest:bookwormeq5.3.0+repack-2.1
minetest:sideq5.3.0+repack-2
minetest:sideq5.3.0+repack-2.1

Name	Operator	Version
minetest:bookworm	eq	5.3.0+repack-2.1
minetest:sid	eq	5.3.0+repack-2
minetest:sid	eq	5.3.0+repack-2.1
minetest:sid	eq	5.3.0+repack-1
minetest:buster	eq	0.4.17.1+repack-1+b1
minetest:bullseye	eq	5.3.0+repack-2
minetest:bullseye	eq	5.3.0+repack-1
minetest:bookworm	eq	5.3.0+repack-2.1
minetest:sid	eq	5.3.0+repack-2
minetest:sid	eq	5.3.0+repack-2.1