Cyclops Core

Cyclops Core

93M Downloads

`dumpregistries` subcommand is not guarded by a permission

andriihorpenko opened this issue ยท 1 comments

commented

Issue type:

  • ๐Ÿ› Bug

Short description:

The dumpregistries subcommand has no permission requirement set, giving anyone an ability to execute this command. Even though this is not a vulnerability, this may cause unnecessary load on a server when used dozens of times by bad actors.

Steps to reproduce the problem:

  1. Be a player with no advanced permissions granted
  2. Use /cyclopscore dumpregistries

Expected behaviour:

Guard a command with an OP check or permission level >= 2, like vanilla does in dozens of commands.


Versions:

  • This mod: 1.19.1
  • Minecraft: 1.19.2
  • Forge: 43.3.13

Log file:

No log file required

commented

Thanks for reporting!