CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 5.39.2 are vulnerable due to inadequate restrictions on JSON payload sizes in ModalFormResponsePacket handling, which can be exploited by authenticated users to trigger denial of service attacks. This vulnerability allows attackers to send oversized JSON arrays, leading to excessive memory and CPU resource consumption, ultimately causing the server to become unresponsive. Server administrators using affected versions should prioritize applying the update to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the server unresponsive.