Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security vulnerabilities [1.7.10] #119

Open
WapMap opened this issue May 12, 2024 · 0 comments
Open

Security vulnerabilities [1.7.10] #119

WapMap opened this issue May 12, 2024 · 0 comments

Comments

@WapMap
Copy link

WapMap commented May 12, 2024

I couldn't find any mention of fixing security vulnerabilities in this mod and thought I'd add them here as an idea to add.

Vulnerabilities:

Log4J CVE-2021-44228 ("Log4Shell")
Severity: Allows remote code execution.
Affected: Potentially anyone running a server or connecting to one, even in vanilla.
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-44228

Bleeding Pipe
Severity: Allows remote code execution on clients and servers (and therefore all connected clients on a server).
Affected: Servers running vulnerable mods and players connected to them.
Details: https://github.com/dogboy21/serializationisbad

Feel free to change the issue title if it doesn't correctly describe what is written here or misleading.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant