CVE-2023-54395

    Dashboard / Vulnerabilities / CVE-2023-54395

    CVE-2023-54395

    Published: 9 Sept 2026Last Modified: 12 Sept 2026

    Summary: PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket

    Details: PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and prevent the server from processing legitimate connections.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54395.json, https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-7m9r-rq9j-wmmh, https://nvd.nist.gov/vuln/detail/CVE-2023-54395, https://www.vulncheck.com/advisories/pocketmine-mp-before-4.12.5-denial-of-service-via-modalformresponsepacket, https://github.com/pmmp/PocketMine-MP/commit/3baa5ab71214f96e6e7ab12cb9beef08118473b5

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d146175d278f2790bfcf319cda9c2961addf4637

    Affected versions

    4.12.4
    4.12.3
    4.12.2
    4.12.1
    4.12.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-54395 | CVE-DB