Description
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify "function" files used by the game when installed on a dedicated server.
High · 7.5
CVE-2024-48645
EUVD-2024-43058GHSA-8v69-x7hj-jwgg
In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify "functi…
Published Oct 21, 2024 · Updated Oct 21, 2024 · Assigned by mitre