PT-2019-12783
CVE-2019-12395
·
Published
2019-05-28
·
Updated
2021-11-08
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Webbukkit Dynmap versions 3.0-beta-3 and below
Description
The issue arises from a missing login check in the servlet/MapStorageHandler.java file, allowing an attacker to view map images without logging in, even when the login-required setting is enabled.
Recommendations
For versions 3.0-beta-3 and below, consider disabling the MapStorageHandler.java servlet until a patch is available to prevent unauthorized access to map images.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾