CVE-2024-48645

Published October 21st, 2024

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify "function" files used by the game when installed on a dedicated server.

arm32x/command-block-ide

Replaces the command block GUI to allow editing multiple command blocks at once.

GitHub