CVE-2024-41565

JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability

Medium · published August 28, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Published
2024-08-28T00:00Z
EPSS history
Timeline
  • 28 AUG 00:00Z
    JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability
    cvelistv5