CVE-2023-35925
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
Résumé
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FastAsyncWorldEdit (FAWE) is designed for efficient world editing. This vulnerability enables the attacker to select a region with the Infinity keyword (case-sensitive!) and executes any operation. This has a possibility of bringing the performing server down. This issue has been fixed in version 2.6.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com