Base Score

MEDIUM6.5

CVE-2022-24301

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.

VectorNETWORK

Published Bycve@mitre.org

Published DateFeb 02, 2022, 06:15

Weakness Type (CWE):CWE-276

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

NONE

References

https://github.com/minetest/minetest/commit/3693b6871eba268ecc79b3f52d00d3cefe761131
https://github.com/minetest/minetest/security/advisories/GHSA-fvwv-qcq6-wmp5
https://www.debian.org/security/2022/dsa-5075

Base Score

MEDIUM6.5

Weakness Type (CWE):CWE-276

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

NONE