MultiPaper / MultiPaper

Multi-server, single-world papermc implementation
https://multipaper.io/
GNU General Public License v3.0
1.21k stars 92 forks source link

Server-side security risks #17

Closed CivicXFB closed 2 years ago

CivicXFB commented 2 years ago

I have found that if my MultiPaper port is compromised, it is possible that they could open their own server through the compromised port and incorporate it into MultiPaper, which could lead to some people creating exploits to access resources through this vulnerability. My suggestion is to add an authentication key to Multipaper-master to allow merging into Multipaper-master when the key is the same, although this is something I have not experimented with.

PureGero commented 2 years ago

A simple firewall is used to prevent unwanted access to server ports. Bungeecord's official firewall guide is linked here: https://www.spigotmc.org/wiki/firewall-guide/