CVE-2023-35925
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
概要
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
FastAsyncWorldEdit (FAWE) is designed for efficient world editing. This vulnerability enables the attacker to select a region with the Infinity keyword (case-sensitive!) and executes any operation. This has a possibility of bringing the performing server down. This issue has been fixed in version 2.6.3.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com