Most recent entries from all

EUVD-2026-54999

fkie_cve-2019-12395

In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting.

GHSA-c58h-qgg9-9p43

In Webbukkit Dynmap 3.0-beta-3, with Spigot 1.13.2, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login despite an enabled login-required setting.

gsd-2019-12395

jvndb-2019-000037

A map plugin for Mincraft server "Dynmap" fails to restrict access permissions (CWE-284). RyotaK directly reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning