Uploaded image for project: 'Minecraft: Java Edition'
  1. Minecraft: Java Edition
  2. MC-131692

Saved Toolbars Exploit

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Resolution: Duplicate
    • Affects Version/s: Minecraft 1.12.2
    • Fix Version/s: None
    • Labels:
      None
    • Confirmation Status:
      Unconfirmed

      Description

      In my opinion, the saved toolbars are a great feature, but easily exploitable. Bad items could be transferred from a single player world to a server.

      "You can only access these in creative tho..."
      True, but items like command signs and command books could also be transferred to give the player server operator. It doesn't matter if the server is part creative or not.

      "Just get a plugin to disable them!"
      Currently, plugins that disable the saved toolbars don't exist. There are plugins that detect foreign items, but that removes all functionality for NBT'd items, spawn eggs, maps, etc.

      "This isn't a bug..."
      That is true, but due to it's ability to ruin a server with almost no way to stop it, might as well be an oversight.

      Recreating something like this is simple. Take a sign with a command like /tellraw or /summon, save it in a toolbar, go onto a server with creative enabled (preferably one that you created), place down the sign somewhere, and click on it.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                Blond The Blond Boy
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: