Description


PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attacker with a valid player session can request that the server drop more items than are available in the player's hotbar, triggering a server crash and resulting in denial of service.

Related CPE's


Could not find any relations

Weaknesses



CWE-1284

CVSS impact metrics


Missing metrics for CVSS V

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information


Source identifier

[email protected]

Vulnerability status

Received

Published

2025-12-31T22:15:47.870

4 hours ago

Last modified

2025-12-31T22:15:47.870

4 hours ago