VULNERABILITY INTELLIGENCE
CVE-2023-7332
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-12-31
Last modified2026-10-28
Description
PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attacker with a valid player session can request that the server drop more items than are available in the player's hotbar, triggering a server crash and resulting in denial of service.
Weakness classification
- disclosure@vulncheck.com: CWE-1284