Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42607
HistoryAug 07, 2023 - 9:42 a.m.

Denial Of Service (DoS)

2023-08-0709:42:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
denial of service
pocketmine-mp
json mapper
vulnerability
loginpacket
application crash

pocketmine/pocketmine-mp is vulnerable to Denial Of Service (DoS). The vulnerability exists in due to the netresearch/jsonmapper dependency due to improper mappings of JSON arrays and objects onto scalar model properties which allows an attacker to send malformed JWT JSON in the LoginPacket causing an application crash.