PT-2025-44048 · Unknown · Inventorygui

Published 2025-10-27 · Updated 2025-11-03 · CVE-2025-62783

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions InventoryGui versions 1.6.1-SNAPSHOT and earlier

Description A flaw exists in InventoryGui that could allow item duplication when the experimental Bundle item feature is enabled on the server. This issue affects any plugin utilizing the GuiStorageElement. The vulnerability is related to the use of the GuiStorageElement within GUIs.

Recommendations Update to version 1.6.2-SNAPSHOT. Avoid using the GuiStorageElement in GUIs.

Exploit

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-837

CWE-754

Related Identifiers

CVE-2025-62783

GHSA-598Q-JW82-5W66

Affected Products

Inventorygui

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62783.json · Exploit
• https://github.com/Phoenix616/InventoryGui/commit/27a52ef6d934a1c232e110e0010e4aa810c27029 · Patch
• https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-598q-jw82-5w66 · Patch
• https://osv.dev/vulnerability/GHSA-598q-jw82-5w66 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62783 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62783 · Vendor Advisory
• https://github.com/Phoenix616/InventoryGui/issues/48 · Note
• https://github.com/Phoenix616/InventoryGui · Note
• https://t.me/cveNotify/141427 · Telegram Post
• https://t.me/CVEtracker/35897 · Telegram Post