CyberRota Analysis
AI-GeneratedVersions of PocketMine-MP prior to 5.42.1 are vulnerable to a denial of service attack via the LoginPacket handler, allowing remote attackers to inject excessive junk properties into the clientData JWT. This can lead to significant server performance degradation as the CPU is overwhelmed by processing these malicious packets. Organizations using PocketMine-MP should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 5.42.1 contain a denial of service vulnerability in the LoginPacket handler that allows remote attackers to flood warning messages by injecting numerous junk properties into the clientData JWT. Attackers can craft malicious login packets with excessive unknown properties to waste server CPU time and degrade performance.