-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| TShock | nuget | >= 4.3.21, < 5.2.1 | 5.2.1 |
C#C#Miggo AIRoot Cause AnalysisThe vulnerability stems from two key points: 1) OTAPI's RemoteClient.Reset() method fails to reset ClientUUID, leaving stale authentication data (CWE-613). 2) TShock's pre-patch Initialize() method didn't implement a workaround for this OTAPI limitation. The TShock fix explicitly adds an event handler to RemoteClient.Reset to nullify ClientUUID, confirming these were the vulnerable points. The first is the root cause in OTAPI, while the second represents TShock's failure to mitigate it initially.
Ongoing coverage of React2Shell