{"id":"CVE-2024-48645","details":"In Minecraft mod \"Command Block IDE\" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify \"function\" files used by the game when installed on a dedicated server.","modified":"2026-08-12T14:52:18.748802Z","published":"2024-10-21T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48645.json"},"references":[{"type":"WEB","url":"https://gist.github.com/apple502j/f083fbe21a7cfe018036c73a0e5fff9a"},{"type":"WEB","url":"https://modrinth.com/mod/command-block-ide/version/0.4.10"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48645.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48645"},{"type":"FIX","url":"https://github.com/arm32x/command-block-ide/commit/42e09840168d9c2fe2ee07f4472d296000b2a416"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/arm32x/command-block-ide","events":[{"introduced":"0"},{"fixed":"42e09840168d9c2fe2ee07f4472d296000b2a416"}],"database_specific":{"source":"REFERENCES"}}],"versions":["0.4.9","0.4.8","0.4.7","0.4.6","0.4.5","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.2.0","0.1.1","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48645.json","vanir_signatures_modified":"2026-08-12T14:52:18Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/arm32x/command-block-ide/commit/42e09840168d9c2fe2ee07f4472d296000b2a416","target":{"file":"src/main/java/arm32x/minecraft/commandblockide/CommandBlockIDE.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["97843601424127875611163910378090101914","310412983789645104390551920448770137459","161427845890154518230008909379077080649","98593900381224569537303768896576013514"]},"id":"CVE-2024-48645-63bdce13","signature_type":"Line"},{"digest":{"function_hash":"281022893790334313340037953605720949716","length":1080},"id":"CVE-2024-48645-a8800020","signature_type":"Function","signature_version":"v1","source":"https://github.com/arm32x/command-block-ide/commit/42e09840168d9c2fe2ee07f4472d296000b2a416","target":{"file":"src/main/java/arm32x/minecraft/commandblockide/CommandBlockIDE.java","function":"onInitialize"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:N"}]}