| Package | Affected versions | Patched versions |
|---|---|---|
| dynmap | = 3.0< 3.0 | 3.0 |
In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free