EssentialsX

EssentialsX

2M Downloads

Instantly crash a server using /mail

spookymgmt opened this issue · 2 comments

commented

Type of bug

Performance issue or memory leak, Exploit

/ess dump all output

413 request entitty too large

Error log (if applicable)

No response

Bug description

[22:04:20] [Server thread/INFO]: MinionMarket issued server command: /mail send bamongus ﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽
[22:04:20] [Server thread/INFO]: Bamongus issued server command: /mail send ordinaryavocado ﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽﷽
[22:04:20] [Server thread/INFO]: OrdinaryAvocado issued server command: /mail read 1
[22:04:20] [Server thread/INFO]: MinionMarket issued server command: /mail read 1

spamming this quickly will instantly crash any server/

Steps to reproduce

above

Expected behaviour

dont allow people to send unicode or Arabic text in mail.

Actual behaviour

everything doesnt explode

commented

There's no real way to prevent this, would recommend just banning people who do this. Just blocking arabic text would prevent people from sending legit messages in arabic.

commented

Restricting mail sending to staff only is also a viable solution