Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Lost-Auction by MintyItanium

    CVE-2026-55624 (GCVE-0-2026-55624)

    Vulnerability from nvd – Published: 2026-08-25 14:56 – Updated: 2026-08-25 18:27
    VLAI
    Title
    MintyItanium Lost-Auction takes items like barrier blocks out from search GUI
    Summary
    MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-25 18:27 UTC
    CWE
    • CWE-670 - Always-Incorrect Control Flow Implementation
    References
    Impacted products
    Vendor Product Version
    MintyItanium Lost-Auction Affected: < 88c920b05042929db334ba06d57f052b42d6b3f8
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-55624",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-25T18:27:27.881532Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-25T18:27:35.700Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Lost-Auction",
              "vendor": "MintyItanium",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 88c920b05042929db334ba06d57f052b42d6b3f8"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "LOW",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "LOW"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-670",
                  "description": "CWE-670: Always-Incorrect Control Flow Implementation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-25T14:56:11.409Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://codeberg.org/MintyItanium/Lost-Auction/commit/88c920b05042929db334ba06d57f052b42d6b3f8",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://codeberg.org/MintyItanium/Lost-Auction/commit/88c920b05042929db334ba06d57f052b42d6b3f8"
            },
            {
              "name": "https://codeberg.org/MintyItanium/Lost-Auction",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://codeberg.org/MintyItanium/Lost-Auction"
            }
          ],
          "source": {
            "advisory": "GHSA-rrpx-47w7-qhx8",
            "discovery": "UNKNOWN"
          },
          "title": "MintyItanium Lost-Auction takes items like barrier blocks out from search GUI"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-55624",
        "datePublished": "2026-08-25T14:56:11.409Z",
        "dateReserved": "2026-06-16T23:31:22.446Z",
        "dateUpdated": "2026-08-25T18:27:35.700Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-55624 (GCVE-0-2026-55624)

    Vulnerability from cvelistv5 – Published: 2026-08-25 14:56 – Updated: 2026-08-25 18:27
    VLAI
    Title
    MintyItanium Lost-Auction takes items like barrier blocks out from search GUI
    Summary
    MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-25 18:27 UTC
    CWE
    • CWE-670 - Always-Incorrect Control Flow Implementation
    References
    Impacted products
    Vendor Product Version
    MintyItanium Lost-Auction Affected: < 88c920b05042929db334ba06d57f052b42d6b3f8
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-55624",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-25T18:27:27.881532Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-25T18:27:35.700Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Lost-Auction",
              "vendor": "MintyItanium",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003c 88c920b05042929db334ba06d57f052b42d6b3f8"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "LOW",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "LOW"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-670",
                  "description": "CWE-670: Always-Incorrect Control Flow Implementation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-25T14:56:11.409Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://codeberg.org/MintyItanium/Lost-Auction/commit/88c920b05042929db334ba06d57f052b42d6b3f8",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://codeberg.org/MintyItanium/Lost-Auction/commit/88c920b05042929db334ba06d57f052b42d6b3f8"
            },
            {
              "name": "https://codeberg.org/MintyItanium/Lost-Auction",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://codeberg.org/MintyItanium/Lost-Auction"
            }
          ],
          "source": {
            "advisory": "GHSA-rrpx-47w7-qhx8",
            "discovery": "UNKNOWN"
          },
          "title": "MintyItanium Lost-Auction takes items like barrier blocks out from search GUI"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-55624",
        "datePublished": "2026-08-25T14:56:11.409Z",
        "dateReserved": "2026-06-16T23:31:22.446Z",
        "dateUpdated": "2026-08-25T18:27:35.700Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }