CyberRota Analysis
AI-GeneratedWings, the server control plane for Pterodactyl, is vulnerable to a memory exhaustion attack due to unbounded parsing of oversized json, yaml, and xml configuration files in versions prior to 1.13.0. This vulnerability can lead to denial of service by exhausting the process memory, impacting the availability of game server management. Users and administrators of Pterodactyl should prioritize upgrading to version 1.13.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is fixed in version 1.13.0.