Threats tagged 'ghsa-8qp9-fmqr-f85w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-125358Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation High7.22026-11-10GCVE DatabaseCVE-2026-125358 Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a has a vulnerability in the HostLink class of its passthrough example mods where WebSocket Origin validation is missing. This flaw allows remote attackers to connect cross-site to an unauthenticated loopback WebSocket and execute Minecraft commands with operator privileges via the WorldBridge.command() function. Report on CVE-2026-125358 Vulnerability CWE-1385 #ghsa-8qp9-fmqr-f85w	GCVE Database	2026-11-10

Page 1 of 1