PT-2024-33168 · Unknown · Command Block Ide
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Command Block IDE versions up to and including 0.4.9
Description
The issue is related to a missing authorization that allows any user to modify
function files used by the game when the mod is installed on a dedicated server. This is due to an authorization flaw.Recommendations
For Command Block IDE versions up to and including 0.4.9, consider restricting access to the
function files to prevent unauthorized modifications until a patch is available.Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Command Block Ide