Injection Vulnerability

2022-02-0806:19:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

69.7%

JSON

Minetest is vulnerable to injection vulnerability. An attacker is able to exploit the vulnerability by adding or modifying arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

CPENameOperatorVersion
minetest:bookwormeq5.3.0+repack-2.1
minetest:sideq5.3.0+repack-2
minetest:sideq5.3.0+repack-2.1
minetest:sideq5.3.0+repack-1
minetest:bustereq0.4.17.1+repack-1+b1
minetest:bullseyeeq5.3.0+repack-2
minetest:bullseyeeq5.3.0+repack-1
minetest:bookwormeq5.3.0+repack-2.1
minetest:sideq5.3.0+repack-2
minetest:sideq5.3.0+repack-2.1

Name	Operator	Version
minetest:bookworm	eq	5.3.0+repack-2.1
minetest:sid	eq	5.3.0+repack-2
minetest:sid	eq	5.3.0+repack-2.1
minetest:sid	eq	5.3.0+repack-1
minetest:buster	eq	0.4.17.1+repack-1+b1
minetest:bullseye	eq	5.3.0+repack-2
minetest:bullseye	eq	5.3.0+repack-1
minetest:bookworm	eq	5.3.0+repack-2.1
minetest:sid	eq	5.3.0+repack-2
minetest:sid	eq	5.3.0+repack-2.1