Описание
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| esm-apps-legacy/xenial | not-affected | code not vulnerable - bot |
| esm-apps/bionic | needed | |
| esm-apps/focal | needed | |
| esm-apps/jammy | not-affected | 5.4.1+repack-2build1 |
| esm-apps/noble | not-affected | 5.4.1+repack-2build1 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| focal | ignored | end of standard support, was needs-triage |
| impish | ignored | end of life |
Показывать по
Ссылки на источники
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta ...
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
ALT-PU-2021-1448: package `minetest` update to version 5.4.0-alt1
ALT-PU-2022-2540: package `minetest` update to version 5.6.0-alt1
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3