Is CVE-2022-51008 being exploited?

No public exploit is currently tracked.

How severe is CVE-2022-51008?

CVE-2022-51008 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2022-51008

Description

PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can flood the server with unauthenticated connections that occupy max-player slots, preventing legitimate players from joining.