CVE-2023-7332 — PocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server Crash
PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attacker with a valid player session can re…
Published: 2025-12-31 · CVSS: 7.1 · CVSS 4.0
PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attacker with a valid player session can request that the server drop more items than are available in the player's hotbar, triggering a server crash and resulting in denial of service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7