Dynmap

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-12395 MEDIUM POC PATCH This Month

In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Dynmap

NVD GitHub

CVSS 3.1

5.3

EPSS

1.6%

CVE-2019-12395

EPSS 2% CVSS 5.3

MEDIUM POC PATCH This Month

In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Dynmap

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy