`dumpregistries` subcommand is not guarded by a permission
andriihorpenko opened this issue ยท 1 comments
Issue type:
- ๐ Bug
Short description:
The dumpregistries
subcommand has no permission requirement set, giving anyone an ability to execute this command. Even though this is not a vulnerability, this may cause unnecessary load on a server when used dozens of times by bad actors.
Steps to reproduce the problem:
- Be a player with no advanced permissions granted
- Use
/cyclopscore dumpregistries
Expected behaviour:
Guard a command with an OP check or permission level >= 2, like vanilla does in dozens of commands.
Versions:
- This mod: 1.19.1
- Minecraft: 1.19.2
- Forge: 43.3.13
Log file:
No log file required