CVE-2024-47765

Summary

CVE-2024-47765 is a cross-site scripting (XSS) vulnerability affecting the Minecraft MOTD Parser, a PHP library used to parse Minecraft server messages of the day (MOTD). The HtmlGenerator class within the library is vulnerable to XSS attacks due to insufficient input validation. Attackers can inject malicious HTML code by manipulating the color and text properties of MotdItem objects in a MotdItemCollection. This vulnerability can be exploited by an attacker controlling a Minecraft server and sending a malicious MOTD to the library, which is then processed by the HtmlGenerator and injected into the web page. The issue is resolved in version 1.0.6 of the library.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.