CVE-2023-54395
PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and prevent the server from processing legitimate connections.
| CWE | CWE-407 |
| Vendor | pmmp |
| Product | pocketmine-mp |
| Published | Sep 9, 2026 |
| Last Updated | Sep 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for pmmp pocketmine-mp
Be the first to know when new medium vulnerabilities affecting pmmp pocketmine-mp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
Affected Versions
pmmp / PocketMine-MP
0 < 4.12.5
References
github.com: https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-7m9r-rq9j-wmmh github.com: https://github.com/pmmp/PocketMine-MP/commit/3baa5ab71214f96e6e7ab12cb9beef08118473b5 vulncheck.com: https://www.vulncheck.com/advisories/pocketmine-mp-before-4.12.5-denial-of-service-via-modalformresponsepacket
Credits
AkmalFairuz