CVE-2023-35925

MediumCVSS 6.2

Published: 23/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

A vulnerability in FastAsyncWorldEdit (FAWE) allows an attacker to select a region using the `Infinity` keyword, enabling any operation to be executed. This could potentially bring the server down.

Risk Assessment

The organization is at risk of server downtime, which may lead to outages and data loss.

Recommendation

It is recommended to upgrade to version 2.6.3, where the issue has been fixed.

Original NVD description (English source)

FastAsyncWorldEdit (FAWE) is designed for efficient world editing. This vulnerability enables the attacker to select a region with the `Infinity` keyword (case-sensitive!) and executes any operation. This has a possibility of bringing the performing server down. This issue has been fixed in version 2.6.3.