Uploaded image for project: 'Minecraft: Java Edition'
  1. Minecraft: Java Edition
  2. MC-253704

Bypassing chat report needing other user to send a message using /execute and /say

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • None
    • 1.19.1 Release Candidate 1
    • Minecraft 1.19.1-RC1 and above, any OS and Java version.
    • Unconfirmed
    • (Unassigned)

      The Bug:
      Similarly to MC-253497, running the command "/execute as player run say a message" you can make another player send a signed message, and it is reportable in the report GUI.
      you could make a player send a message that contains things againts the TOS, that they would not send otherwise, and report them. this can be used to ban players for something they did not say, and completely prevent that player from playing.

      Steps To Reproduce:

      1. join a server with other players as an operator, or a user with the permission to run /execute
      2. run the command: /execute as "name of another player" run say "a message that contains malicious content"
      3. report the player you made say the message in the report UI.

      Expected Behavior:

      The message you sent as another player should not be reportable in the GUI.

      Observed Behavior:

      The message you sent as another player is reportable in the GUI, and gets reported successfully.

            Unassigned Unassigned
            RealY700 RealY700
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: