{"id":"CVE-2022-24301","details":"In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.","aliases":["GHSA-fvwv-qcq6-wmp5"],"modified":"2026-08-12T13:00:27.063523Z","published":"2022-02-02T06:00:50Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24301.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24301.json"},{"type":"ADVISORY","url":"https://github.com/minetest/minetest/security/advisories/GHSA-fvwv-qcq6-wmp5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24301"},{"type":"ADVISORY","url":"https://www.debian.org/security/2022/dsa-5075"},{"type":"FIX","url":"https://github.com/minetest/minetest/commit/3693b6871eba268ecc79b3f52d00d3cefe761131"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/luanti-org/luanti","events":[{"introduced":"0"},{"fixed":"f3e51dca155ce1d1062a339cf925f41d7c751df8"},{"fixed":"3693b6871eba268ecc79b3f52d00d3cefe761131"}],"database_specific":{"cpe":"cpe:2.3:a:minetest:minetest:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.4.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["5.3.0","5.2.0","5.1.0","5.0.0","0.4.16","0.4.15","0.4.14","0.4.13","0.4.11","0.4.10","0.4.9","0.4.8","0.4.4","0.4.3","0.4.2-rc1","0.4.1","0.4.0","0.4.dev-20120606","0.4.dev-20120603","0.3.1","0.4.dev-20120408","0.4.dev-20120326","0.4.dev-20120320","0.4.dev-20120318","0.4.dev-20120122-1","0.4.dev-20120106-1","0.4.dev-20111209-1","0.4.dev-20111204-1","0.4.dev-20111203-3","0.4.dev-20111203-2","0.4.dev-20111203-1","0.4.dev-20111202-1","0.4.dev-20111201-0","0.3.0","0.3.dev-20111021","0.2.20110922_1","0.2.20110922","0.2.20110731_3"],"database_specific":{"vanir_signatures":[{"target":{"file":"src/network/serverpackethandler.cpp","function":"Server::handleCommand_InventoryAction"},"deprecated":false,"digest":{"function_hash":"333345369007754403464446999572628582386","length":3866},"id":"CVE-2022-24301-8bad1bc1","signature_type":"Function","signature_version":"v1","source":"https://github.com/luanti-org/luanti/commit/3693b6871eba268ecc79b3f52d00d3cefe761131"},{"deprecated":false,"digest":{"line_hashes":["109852455045682959423562883464882433552","272338137467696577411316522009816775792","329543962429951868902124908619273520932","340007923247070963899536637319099726021","173505698149883634758287213065626927478","200292100874173318550475126202276169601","208719012251884433935292188305963145043","246924750802831491402451146392043089588","315654912689685279433954885227958347285"],"threshold":0.9},"id":"CVE-2022-24301-b8870769","signature_type":"Line","signature_version":"v1","source":"https://github.com/luanti-org/luanti/commit/3693b6871eba268ecc79b3f52d00d3cefe761131","target":{"file":"src/network/serverpackethandler.cpp"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24301.json","vanir_signatures_modified":"2026-08-12T13:00:27Z"}}],"schema_version":"1.9.0"}