Security Advisory
CVE-2023-54393
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server.