Skip to content
OpenAdvisories

Vendor

GeyserMC

2 known vulnerabilities.

Products

Geyser 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2021-39177

    User impersonation due to incorrect handling of the login JWT

    Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Versions of Geyser prior to 1.4.2-SNAPSHOT allow anyone that can connect to the server to forge a LoginPacket with manipulated JWT token allowing impersonation as any user. Ver…

    GeyserMC Geyser org.geysermc:connector Maven