Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiverse exploit FIXED #2703

Closed
ConstructorLeo opened this issue Sep 18, 2021 · 12 comments
Closed

Multiverse exploit FIXED #2703

ConstructorLeo opened this issue Sep 18, 2021 · 12 comments
Labels
Bug: Confirmed Issue/problem with the software.

Comments

@ConstructorLeo
Copy link

ConstructorLeo commented Sep 18, 2021

Information

Details

I was able to reproduce my issue on a freshly setup and up-to-date server with the latest version of Multiverse plugins with no other plugins and with no kinds of other server or client mods.

Description
Upon typing a Multiverse command a player can crash a server.

Steps to reproduce
Simply type /mv __REDACTED__ into chat.

Expected behavior
Does not crash the server.

Screenshots
SCREENSHOT REDACTED

@ConstructorLeo ConstructorLeo added the Bug: Unconfirmed Unsure if the issue/bug is valid. label Sep 18, 2021
@StrawberryOG

This comment has been minimized.

@benwoo1110

This comment has been minimized.

@StrawberryOG

This comment has been minimized.

@cosmohdx

This comment has been minimized.

@wellnesscookie

This comment has been minimized.

@benwoo1110
Copy link
Member

9ce2dfd

@wellnesscookie

This comment has been minimized.

This was referenced Sep 20, 2021
@benwoo1110 benwoo1110 added Bug: Confirmed Issue/problem with the software. and removed Bug: Unconfirmed Unsure if the issue/bug is valid. labels Sep 22, 2021
@benwoo1110

This comment has been minimized.

@xxmethaa

This comment has been minimized.

@benwoo1110

This comment has been minimized.

@benwoo1110

This comment has been minimized.

@Multiverse Multiverse deleted a comment from wotnurwasfrage Sep 23, 2021
@Multiverse Multiverse locked and limited conversation to collaborators Sep 23, 2021
@benwoo1110
Copy link
Member

benwoo1110 commented Sep 23, 2021

For those that see this issue, we have fixed it so JUST UPDATE: https://www.spigotmc.org/resources/multiverse-core.390/update?update=424085

We have also noted that some people are unable to update for whatever reason. Then just grab the patch: https://www.spigotmc.org/resources/multiverse-patches.96390/ (Tho we still recommend you ultimately update mv)

@benwoo1110 benwoo1110 changed the title Multiverse command to crash server Multiverse exploit FIXED Sep 23, 2021
@benwoo1110 benwoo1110 pinned this issue Sep 23, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Bug: Confirmed Issue/problem with the software.
Projects
None yet
Development

No branches or pull requests

6 participants