You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The dumpregistries subcommand has no permission requirement set, giving anyone an ability to execute this command. Even though this is not a vulnerability, this may cause unnecessary load on a server when used dozens of times by bad actors.
Steps to reproduce the problem:
Be a player with no advanced permissions granted
Use /cyclopscore dumpregistries
Expected behaviour:
Guard a command with an OP check or permission level >= 2, like vanilla does in dozens of commands.
Versions:
This mod: 1.19.1
Minecraft: 1.19.2
Forge: 43.3.13
Log file:
No log file required
The text was updated successfully, but these errors were encountered:
Issue type:
Short description:
The
dumpregistries
subcommand has no permission requirement set, giving anyone an ability to execute this command. Even though this is not a vulnerability, this may cause unnecessary load on a server when used dozens of times by bad actors.Steps to reproduce the problem:
/cyclopscore dumpregistries
Expected behaviour:
Guard a command with an OP check or permission level >= 2, like vanilla does in dozens of commands.
Versions:
Log file:
No log file required
The text was updated successfully, but these errors were encountered: