Multiverse exploit to crash any server by just writing in chat, players done even need permissons to do this.
TomLewis opened this issue ยท 3 comments
Information
Please do not reply with "update past 1.12.2" obviously this is a massive task we are working towards, its not an excuse to ignore this massive security issue, I cannot update the plugin as you have dropped 1.12.2 support.
-
Server version: Paper 1.12.2
-
Full output of
/mv version -p: https://gist.github.com/TomLewis/8d8e16fb5cdd3128f8e5846ab73684d4
Details
Multiverse has an exploit that allows ANYONE that joins the server to crash it by writing this in chat:
/mv ---
Description
Do what I said above.
Steps to reproduce
Do what I said above.
Expected Behaviour
To not crash a server.
You have spelt "behaviour" incorrectly in your GitHub template for issues.
This is exploding in popularity because of this video
https://www.youtube.com/watch?v=
https://www.spigotmc.org/resources/multiverse-patches.96390/ bcu im nice, so you're welcomed.
Duplicate of #2703.