{
   "expand": "operations,versionedRepresentations,editmeta,changelog,renderedFields",
   "id": "334511",
   "self": "https://bugs.mojang.com/rest/api/2/issue/334511",
   "key": "BDS-5861",
   "fields": {
      "issuetype": "1",
      "project": "11700",
      "fixVersions": [],
      "resolution": "3",
      "customfield_10500": {
         "self": "https://bugs.mojang.com/rest/api/2/customFieldOption/10300",
         "value": "Unconfirmed",
         "id": "10300",
         "disabled": false
      },
      "customfield_12800": null,
      "customfield_12602": [],
      "customfield_12601": null,
      "customfield_12604": null,
      "customfield_12603": null,
      "customfield_12606": null,
      "customfield_12605": null,
      "customfield_12608": null,
      "resolutiondate": "2020-06-21T05:32:02.000+0300",
      "customfield_12607": null,
      "customfield_12609": null,
      "workratio": -1,
      "lastViewed": null,
      "watches": {
         "self": "https://bugs.mojang.com/rest/api/2/issue/BDS-5861/watchers",
         "watchCount": 2,
         "isWatching": false
      },
      "created": "2020-06-06T09:15:02.000+0300",
      "customfield_12000": null,
      "customfield_12201": null,
      "customfield_12600": null,
      "labels": [],
      "customfield_11700": "{}",
      "versions": [
         "19406"
      ],
      "issuelinks": [
         {
            "id": "188667",
            "self": "https://bugs.mojang.com/rest/api/2/issueLink/188667",
            "type": "10102",
            "outwardIssue": "256670"
         }
      ],
      "assignee": null,
      "updated": "2020-06-21T05:32:02.000+0300",
      "status": "5",
      "description": "Not sure if this is intended or a bug, but when cheats are deactivated (Cheats are set to false in the server.proporties) on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.\r\n\r\n\u00a0\r\n\r\nI later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. \u00a0I\u2019m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server. \u00a0\r\n I also found out that command block mine carts are still usable when gamerule commandblocksenabed is set to false. \u00a0\u00a0",
      "customfield_11100": null,
      "customfield_11300": null,
      "customfield_11500": null,
      "customfield_12503": null,
      "customfield_12700": null,
      "customfield_12502": null,
      "security": {
         "self": "https://bugs.mojang.com/rest/api/2/securitylevel/10318",
         "id": "10318",
         "description": "Private, viewable only by volunteers and up.",
         "name": "Minecraft - Private"
      },
      "customfield_12504": null,
      "attachment": [],
      "summary": "Command exploit",
      "creator": "JIRAUSER489790",
      "reporter": "JIRAUSER489790",
      "customfield_10002": null,
      "customfield_12501": null,
      "customfield_12500": null,
      "customfield_11601": null,
      "customfield_11600": "0|i1fh07:",
      "environment": "Windows 10",
      "customfield_11801": null,
      "customfield_11800": null,
      "customfield_11602": null,
      "customfield_11802": null,
      "comment": {
         "comments": [
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/334511/comment/721462",
               "id": "721462",
               "author": "ocelotonesie",
               "body": "MEQS_KEEP_PRIVATE",
               "updateAuthor": "ocelotonesie",
               "created": "2020-06-06T22:16:28.796+0300",
               "updated": "2020-06-06T22:16:28.796+0300",
               "visibility": {
                  "type": "group",
                  "value": "staff"
               }
            },
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/334511/comment/736750",
               "id": "736750",
               "author": "ionicecko",
               "body": "*Thank you for your report!*\r\n\r\nWe're actually already tracking this issue as *BDS-1336* (which is a private bug report), so this ticket is being resolved and linked as a *duplicate*.\r\n\r\n*Quick Links*:\r\n\ud83d\udcd3 [Issue Guidelines|https://bugs.mojang.com/projects/MCPE/summary] -- \ud83d\udcac [Community Support|https://discord.gg/58Sxm23] -- \ud83d\udce7 [Customer Support|https://help.minecraft.net/hc/en-us/requests/new] -- \u270d\ufe0f [Feedback and Suggestions|https://feedback.minecraft.net/] -- \ud83d\udcd6 [Game Wiki|https://minecraft.gamepedia.com/Minecraft_Wiki]",
               "updateAuthor": "ionicecko",
               "created": "2020-06-21T05:32:02.386+0300",
               "updated": "2020-06-21T05:32:02.386+0300"
            }
         ],
         "maxResults": 2,
         "total": 2,
         "startAt": 0
      },
      "votes": {
         "self": "https://bugs.mojang.com/rest/api/2/issue/BDS-5861/votes",
         "votes": 0,
         "hasVoted": false
      }
   },
   "changelog": {
      "startAt": 0,
      "maxResults": 6,
      "total": 6,
      "histories": [
         {
            "id": "1629773",
            "author": "JIRAUSER489790",
            "created": "2020-06-06T10:35:40.081+0300",
            "items": [
               {
                  "field": "description",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": "Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel, the problem is that there is an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.",
                  "to": null,
                  "toString": "Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers."
               }
            ]
         },
         {
            "id": "1637649",
            "author": "JIRAUSER489790",
            "created": "2020-06-09T21:08:43.226+0300",
            "items": [
               {
                  "field": "description",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": "Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.",
                  "to": null,
                  "toString": "Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.\r\n\r\n\u00a0\r\n\r\nI later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. \u00a0I\u2019m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server."
               }
            ]
         },
         {
            "id": "1648330",
            "author": "JIRAUSER489790",
            "created": "2020-06-13T08:37:14.876+0300",
            "items": [
               {
                  "field": "description",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": "Not sure if this is intended or a bug, but when cheats are deactivated on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.\r\n\r\n\u00a0\r\n\r\nI later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. \u00a0I\u2019m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server.",
                  "to": null,
                  "toString": "Not sure if this is intended or a bug, but when cheats are deactivated (Chests are set to false in the server.proporties) on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.\r\n\r\n\u00a0\r\n\r\nI later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. \u00a0I\u2019m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server. \u00a0\r\nI also found out that command block mine carts are still usable when gamerule commandblocksenabed is set to false. \u00a0\u00a0"
               }
            ]
         },
         {
            "id": "1648331",
            "author": "JIRAUSER489790",
            "created": "2020-06-13T08:37:58.643+0300",
            "items": [
               {
                  "field": "description",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": "Not sure if this is intended or a bug, but when cheats are deactivated (Chests are set to false in the server.proporties) on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.\r\n\r\n\u00a0\r\n\r\nI later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. \u00a0I\u2019m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server. \u00a0\r\nI also found out that command block mine carts are still usable when gamerule commandblocksenabed is set to false. \u00a0\u00a0",
                  "to": null,
                  "toString": "Not sure if this is intended or a bug, but when cheats are deactivated (Cheats are set to false in the server.proporties) on the Bedrock Dedicated Server, commands can still be executed in the server counsel, even if achievements are enabled, you are able to set your game mode to creative in a world that allows achievements, this bug also makes an exploit where players can use a hacked client to have access to any command, \u00a0that can switch there game mode to creative, and switch others to creative, Teleport anyone anywhere, as if they have OP on the server, \u00a0you can\u2019t even effectively ban them because they can disable command blocks also, basically my server is unplayable because of this certain group of players. \u00a0They can still use this exploit with cheats off, and achievements enabled. \u00a0I put this as private because I don\u2019t what people to see this and start using the exploit on other servers.\r\n\r\n\u00a0\r\n\r\nI later found out that this is not a backdoor to the server, they use a hacked client called toolbox to summon command blocks in mine carts containing commands, then executing them, I had to disable command blocks on my server. \u00a0I\u2019m assuming that this can happen on any bedrock edition world, or realm, and not just the dedicated server. \u00a0\r\n I also found out that command block mine carts are still usable when gamerule commandblocksenabed is set to false. \u00a0\u00a0"
               }
            ]
         },
         {
            "id": "1665935",
            "author": "ionicecko",
            "created": "2020-06-21T05:32:02.401+0300",
            "items": [
               {
                  "field": "Link",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": null,
                  "to": "BDS-1336",
                  "toString": "This issue duplicates BDS-1336"
               }
            ]
         },
         {
            "id": "1665937",
            "author": "ionicecko",
            "created": "2020-06-21T05:32:02.454+0300",
            "items": [
               {
                  "field": "resolution",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": null,
                  "to": "3",
                  "toString": "Duplicate"
               },
               {
                  "field": "status",
                  "fieldtype": "jira",
                  "from": "1",
                  "fromString": "Open",
                  "to": "5",
                  "toString": "Resolved"
               }
            ]
         }
      ]
   }
}