PT-2025-45683 · Maven · De.Themoep:Inventorygui

Publicado 2025-10-28 · Atualizado 2025-10-28

OSV

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Impact

Any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element.

Patches

InventoryGui 1.6.5 (included in latest 1.6.5-SNAPSHOT) by disabling GuiStorageElement when not running on 1.21.9 or later.

Workarounds

Not using the GuiStorageElement.

Correção

Enumeração de Fraquezas

CWE-837

Identificadores relacionados

GHSA-7WHH-79J3-7C55

Produtos afetados

De.Themoep:Inventorygui

Referências · 5

• https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-7whh-79j3-7c55 · Nota
• https://github.com/Phoenix616/InventoryGui/commit/690fc91d137c6cc04f6ed3a89449050964dd8cb9 · Nota
• https://github.com/Phoenix616/InventoryGui · Nota
• https://osv.dev/vulnerability/GHSA-7whh-79j3-7c55 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-62784 · Nota de Segurança