CVE-2025-62783: InventoryGui affected by item duplication in GUIs which use GuiStorageElement
5
Basic Information
Technical Details
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| de.themoep:inventorygui | maven | <= 1.6.1-SNAPSHOT | 1.6.2-SNAPSHOT |
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The analysis of the patch commit 27a52ef6d934a1c232e110e0010e4aa810c27029 reveals that the item duplication vulnerability is rooted in the simulateCollectToCursor method of the InventoryGui.java file. The original implementation failed to correctly associate inventory updates with the specific player performing the action, creating a race condition that could be exploited to duplicate items. The patch rectifies this by passing the player object to the setStorageItem method, ensuring that the operation is atomic and player-specific. The handleInteract method is also identified as a relevant function, as it acts as the dispatcher that invokes the vulnerable simulateCollectToCursor method upon a COLLECT_TO_CURSOR event. The changes in handleInteract itself are primarily for error handling, but its role in the execution path makes it a relevant function for profiling during exploitation.
Vulnerable functions
de.themoep.inventorygui.InventoryGui.simulateCollectToCursorsrc/main/java/de/themoep/inventorygui/InventoryGui.java
de.themoep.inventorygui.InventoryGui.handleInteractsrc/main/java/de/themoep/inventorygui/InventoryGui.java