CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 5.25.2 are vulnerable due to inadequate restrictions on the explode() function during packet parsing, enabling attackers to exploit this flaw by sending specially crafted packets. This can lead to resource exhaustion, impacting CPU and memory usage on the server. Administrators of affected PocketMine-MP installations should prioritize updating to the latest version to mitigate potential denial-of-service conditions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints.