Mojira Archive
MCPE-39590

World host can evaluate selectors even when cheats are disabled

The world host can use target selectors in commands like /tell, even when cheats are disabled. This allows them to get information they should not have access to.

Parameter(s) Example Leaked Information
x y z r rm dx dy dz /tell @a[x=0,z=0,r=10] hi Locations of players and coordinates in the world.
scores /tell @a[scores=\{something=15..}] hi Scoreboard objective names and player scores for internal objectives. 
l lm /tell @a[lm=30] hi Amount of levels a player has.
m /tell @a[m=0] hi Internal gamemode IDs and gamemodes of players.
ry rym rx rxm /tell @a[rxm=0,rx=0] hi Direction a player is facing.

Other players without cheats are told "insufficent permissions for selector expansion."

Fixed

[Mod] tryashtar

2018-12-09, 02:15 AM

2020-07-20, 11:48 AM

2019-06-06, 12:37 AM

0

0

Confirmed

162808

1.7.1

1.11.4