CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 4.12.5 are vulnerable to a denial-of-service attack due to improper handling of ModalFormResponsePacket, allowing attackers to exhaust server resources by sending oversized JSON payloads. This can lead to significant CPU consumption, hindering the server's ability to process legitimate user connections. Server administrators using affected versions should prioritize applying the update to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and prevent the server from processing legitimate connections.