PT-2025-45683

Published

2025-10-28

·

Updated

2025-10-28

Description by

CVSS 4.0
5.3
Medium
MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Impact

Any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element.

Patches

InventoryGui 1.6.5 (included in latest 1.6.5-SNAPSHOT) by disabling GuiStorageElement when not running on 1.21.9 or later.

Workarounds

Not using the GuiStorageElement.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-837: Improper Enforcement of a Single, Unique Action
Related identifiers
GHSA-7WHH-79J3-7C55
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com