CVE-2024-41565

—

CVSS 3.1

5.3 medium

EPSS

<1%p24

Published

Aug 28, 2024 (Aug 28, 2024)

Modified

Jun 17, 2026

Description

JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication.

Vendors: mezz
Products: justenoughitems
Weakness: CWE-129, CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.