-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from the lack of item count validation in the inventory transaction handling. The patch added a check comparing $sourceSlotItem->getCount() against $droppedCount, confirming the absence of this validation in the original code. The handleNormalTransaction function in InGamePacketHandler.php was directly modified to address this flaw, making it the clear vulnerable point.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pocketmine/pocketmine-mp | composer | < 4.18.1 | 4.18.1 |