CVE-2023-35925
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
Summary
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
Original description
The description as published by the source.
FastAsyncWorldEdit (FAWE) is designed for efficient world editing. This vulnerability enables the attacker to select a region with the Infinity keyword (case-sensitive!) and executes any operation. This has a possibility of bringing the performing server down. This issue has been fixed in version 2.6.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com