CVE-2022-24300

EPSS 0.83%
Published 02.02.2022 06:15:06
Last modified 21.11.2024 06:50:07
Source cve@mitre.org
Teams watchlist Login
Open Login

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Minetest ≫ Minetest Version < 5.4.0

Debian ≫ Debian Linux Version10.0

Debian ≫ Debian Linux Version11.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.83%	0.739

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

https://bugs.debian.org/1004223

Patch

Third Party Advisory

Mailing List

https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae

Patch

Third Party Advisory

https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf

Patch

Third Party Advisory

https://www.debian.org/security/2022/dsa-5075

Third Party Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2022-24300

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-24300

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-24300

EUVD