Medium severity4.3NVD Advisory· Published Sep 9, 2026· Updated Oct 8, 2026

CVE-2023-54395

Description

PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by sending large JSON payloads. Attackers can send numerous oversized modal form response packets to consume CPU time and prevent the server from processing legitimate connections.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pmmp/Pocketmine Mpreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <4.12.5

Patches

Vulnerability mechanics

References

github.com/pmmp/PocketMine-MP/commit/3baa5ab71214f96e6e7ab12cb9beef08118473b5nvd
github.com/pmmp/PocketMine-MP/security/advisories/GHSA-7m9r-rq9j-wmmhnvd
www.vulncheck.com/advisories/pocketmine-mp-before-4.12.5-denial-of-service-via-modalformresponsepacketnvd

News mentions

PocketMine-MP: 18 DoS Vulnerabilities Disclosed in Coordinated Batch
Vypr Intelligence · Sep 9, 2026

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000