Security Advisory

CVE-2023-54393

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-09 13:31:52
Last updated 2026-09-14 13:15:13
Assigner VulnCheck
CVSS score 8.7
State PUBLISHED

Description

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server.