CVE-2024-42698

MOYENNE 5.3CVE-2024-42698 · Published 28/08/2024 · updated 17/06/2026

En bref

CVE-2024-42698 est une vulnérabilité MOYENNE (CVSS 5.3) touchant roughlyenoughitems (shedaniel).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.31%, plus élevée que 24.1% des vulnérabilités.
Correctif : mettre à jour vers 16.0.744 ou plus récent.

Package	Affected versions	Patched versions
roughlyenoughitems shedaniel	`< 16.0.744`	`16.0.744`

Description

Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items (REI) mod for Minecraft, which allows in-game item duplication.

References

gist.github.com/apple502j/7b1af0082449c9bfbf910e9a25ef3595 · Third Party Advisory
shedaniel/RoughlyEnoughItems commit e80ca84 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free