WeGuardian
WeGuardian is a modern punishment plugin for single servers and server networks, offering reliable ban, mute, and kick management with a clear and customizable punishment system.
Список изменений
Critical & High Severity
Request/Response Mix-up – prevented user data from being sent to wrong users.
Potential Remote Code Execution (RCE) – fixed vulnerability with partial PUT requests.
DoS in multipart upload – mitigated Denial of Service attacks.
TOCTOU Race Conditions – fixed Time-of-Check to Time-of-Use timing issues.
Resource Shutdown Issues – corrected improper resource management.
Regular Expression Denial of Service (ReDoS) – in TimeUtils.java, unsafe regex patterns fixed.
Moderate & Low Severity
Security constraint bypasses – ensured constraints cannot be bypassed.
HTTP priority header DoS – mitigated potential Denial of Service via HTTP headers.
CGI and rewrite rule bypasses – fixed vulnerabilities allowing rule circumvention.
Unbounded Input Handling – limited maximum input length in time parsing.
Unsafe Time Parsing – ensured integers are only parsed after regex validation.
