We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-48645



Description

In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify "function" files used by the game when installed on a dedicated server.

Reserved 2024-10-08 | Published 2024-10-21 | Updated 2024-10-21 | Assigner mitre


HIGH: 7.5CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:N

References

gist.github.com/apple502j/f083fbe21a7cfe018036c73a0e5fff9a

github.com/...ommit/42e09840168d9c2fe2ee07f4472d296000b2a416

modrinth.com/mod/command-block-ide/version/0.4.10

cve.org (CVE-2024-48645)

nvd.nist.gov (CVE-2024-48645)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2024-48645

Support options

Helpdesk Chat, Email, Knowledgebase