Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection...

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2022-24300 minetest Fixed in: 5.3.0+repack-2.1+deb11u1
• Ubuntu UBUNTU-CVE-2022-24300 minetest

References

• advisory github.com
• advisory github.com
• advisory nvd.nist.gov
• advisory debian.org
• patch github.com
• web bugs.debian.org