Critical severity9.8NVD Advisory· Published Feb 2, 2022· Updated Jun 17, 2026

CVE-2022-24300

Description

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Minetest/Minetest2 versions
cpe:2.3:a:minetest:minetest:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:minetest:minetest:*:*:*:*:*:*:*:*range: <5.4.0
- (no CPE)range: <5.4.0
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Minetest/Minetestdescription

Patches

Vulnerability mechanics

References

bugs.debian.org/1004223nvdMailing ListPatchThird Party Advisory
github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52daenvdPatchThird Party Advisory
github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cfnvdPatchThird Party Advisory
www.debian.org/security/2022/dsa-5075nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000