GeysermcCVEs & Vulnerabilities

1 CVEs affecting Geysermc products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

geyser 1

CVE-2021-39177CRITICAL

Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Versions of Geyser prior to 1.4.2-SNAPSHOT allow anyone that can connect to the server to forge a LoginPacket with manipulated JWT token allowing impersonation as any user. Version 1.4.2-SNAPSHOT contains a patch for the issue. There are no known workarounds aside from upgrading.

31 Aug 2021

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database