cve/2019/CVE-2019-12395.md
2024-06-09 00:33:16 +00:00

726 B

CVE-2019-12395

Description

In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting.

POC

Reference

Github