Mojira Archive
MC-116617

New AutoCraft Functionality Allows Spawning Arbitrary Items

As per title, no validation is performed on ItemStacks received from the client for this functionality.

Ideally ItemStacks shouldn't even be sent from client->server as their complex NBT serialization tends to lead to a large class of other DoS style exploits (c.f. creative mode).

Fixed

[Mod] md_5

Maria Lemón

2017-04-25, 10:40 AM

2017-04-26, 09:42 AM

2017-04-26, 09:42 AM

1

2

Unconfirmed

crafting, item, recipe-book

Minecraft 17w16b

Minecraft 17w17a