{"id":"CVE-2024-48645","details":"In Minecraft mod \"Command Block IDE\" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify \"function\" files used by the game when installed on a dedicated server.","modified":"2026-10-28T10:54:36.181471020Z","published":"2024-10-21T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48645.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://gist.github.com/apple502j/f083fbe21a7cfe018036c73a0e5fff9a"},{"type":"WEB","url":"https://modrinth.com/mod/command-block-ide/version/0.4.10"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48645.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48645"},{"type":"FIX","url":"https://github.com/arm32x/command-block-ide/commit/42e09840168d9c2fe2ee07f4472d296000b2a416"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/arm32x/command-block-ide","events":[{"introduced":"0"},{"fixed":"42e09840168d9c2fe2ee07f4472d296000b2a416"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"last_affected":"0.4.9"}],"source":"DESCRIPTION"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"42e09840168d9c2fe2ee07f4472d296000b2a416"}]}]}}],"versions":["0.4.9","0.4.8","0.4.7","0.4.6","0.4.5","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.2.0","0.1.1","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48645.json","vanir_signatures":[{"digest":{"line_hashes":["97843601424127875611163910378090101914","310412983789645104390551920448770137459","161427845890154518230008909379077080649","98593900381224569537303768896576013514"],"threshold":0.9},"id":"CVE-2024-48645-63bdce13","signature_type":"Line","signature_version":"v1","source":"https://github.com/arm32x/command-block-ide/commit/42e09840168d9c2fe2ee07f4472d296000b2a416","target":{"file":"src/main/java/arm32x/minecraft/commandblockide/CommandBlockIDE.java"},"deprecated":false},{"digest":{"function_hash":"281022893790334313340037953605720949716","length":1080},"id":"CVE-2024-48645-a8800020","signature_type":"Function","signature_version":"v1","source":"https://github.com/arm32x/command-block-ide/commit/42e09840168d9c2fe2ee07f4472d296000b2a416","target":{"file":"src/main/java/arm32x/minecraft/commandblockide/CommandBlockIDE.java","function":"onInitialize"},"deprecated":false}],"vanir_signatures_modified":"2026-10-28T10:54:36Z"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:N"}]}