ALT-PU-2021-1448-1
Closed vulnerabilities
Published: 2022-02-02
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2022-24300
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- https://bugs.debian.org/1004223
- https://bugs.debian.org/1004223
- https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae
- https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae
- https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf
- https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf
- DSA-5075
- DSA-5075
Published: 2022-02-02
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2022-24301
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
Severity: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
References:
- https://github.com/minetest/minetest/commit/3693b6871eba268ecc79b3f52d00d3cefe761131
- https://github.com/minetest/minetest/commit/3693b6871eba268ecc79b3f52d00d3cefe761131
- https://github.com/minetest/minetest/security/advisories/GHSA-fvwv-qcq6-wmp5
- https://github.com/minetest/minetest/security/advisories/GHSA-fvwv-qcq6-wmp5
- DSA-5075
- DSA-5075