Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Supermonis

#45262de 56,337
6.2CVSS total
Vulnerabilidades · 1
PT-2023-25384
6.2
2023-06-22
Unknown · Fastasyncworldedit · CVE-2023-35925
**Name of the Vulnerable Software and Affected Versions** FastAsyncWorldEdit versions prior to 2.6.3 **Description** This issue enables an attacker to select a region with the `Infinity` keyword and execute any operation, potentially bringing the server down. The attacker can exploit this by selecting a position with the `Infinity` keyword via commands like `//pos2 Infinity` and then executing further operations. **Recommendations** For versions prior to 2.6.3, update FastAsyncWorldEdit to version 2.6.3 as soon as possible to address the vulnerability. As a temporary workaround, consider restricting the use of the `Infinity` keyword in position selection commands until the update is applied. Additionally, users with access to server logs can try to identify possible abuses of this issue by searching for the regex query `//pos[12] Infinity` in the logs.