CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 5.41.1 are vulnerable to a denial of service attack due to improper handling of large or complex structures in LoginPacket processing, leading to excessive logging and potential out-of-memory crashes. Attackers can exploit this by sending specially crafted LoginPackets, which can disrupt server availability. Organizations using affected versions should prioritize patching to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excessive logging without sanitization. Attackers can send crafted LoginPackets with deeply nested or massive object structures to trigger out-of-memory conditions and crash the server.