Chunk-Pregenerator-1.19.3-4.4.6
Curse Maven Snippet
What's new
Security Patch thanks to Banyourself.
The mod had a few packets that could be exploited to cause lag on servers.
No RemoteCodeExecution was possible, just spam targets
Changelog:
- Fixed: DiscPacket had no auth check and could cause CPU/Storage lag (Disk Packet shows basically a layout of the entire safefile but only for a GUI and no write access at all)
- Fixed: MemoryPacket had no auth check and could cause excessive CPU/Storage lag (The packet shows Free/Used Storagespace)
- Fixed: ProgressPacket.Cancel had no auth check and anyone could cancel mini tasks without permissions.
- Fixed: RetrogenPacket.Sync had an exploit where a client side packet could be send to the server and allow to bypass auth checks. (so anyone could change the retorgen settings)
- Fixed: SyncStatePacket technically could lead to Undefined behavior where in very specific cases auth checks could be bypasses (none existed but future versions could have had that)
This mod has no additional files

