Duplication exploit #17

  • Bug
  • Plugin Conflict
  • Other
Open
Assigned to
View Lhykos's Profile
lhykos
  • View kermitviii's Profile
    kermitviii created this issue Feb 21, 2023

    Minecraft Server Version

    (Please also add the exact version number you use)

     

    [  ] Bukkit 

    [  ] Spigot 

    [  ] Paper 

    [ x ] Pufferfish

     

    Server Version: Pufferfish version git-Pufferfish-56 (MC: 1.19.3)

    Plugin Version: 1.5.3

     

     

    Description

    This exploit allows the duplication of any item or item stack

     

     

     

    How to Reproduce

    I feel it would be better to not discuss how to do this exploit publicly. If you message me on discord @Kerm#9999 I will respond immediately, but I will also check this issue as often as possible.

     

     

     

    Used Plugins

    I don't think any other plugins have a part in the issue

     

    AdvancedPortals, AntiZombification, ArmorStandTools, BetterRTP, BlockLocker, BoatRace, Boosters, BossBarTimer, Brewery, BungeeGuard, BuycraftX, ChatFilter, ChestShop, ChestShopNotifier, Chunky, Citizens, ClueScrolls, CMILib, CommandPanels, ContainerUtilities, CoreProtect, DebugStick, DecentHolograms, DeluxeCoinflip, DenyBack, eco, EcoArmor, EcoBosses, EcoEnchants, EcoItems, EconomyShopGUI-Premium, EcoSkills, EcoUnenchanter, eGlow, ElevatorSigns, Essentials, EssentialsDiscord, EssentialsSpawn, ExcellentCrates, ExecutableBlocks, ExecutableItems, FastAsyncVoxelSniper, FastAsyncWorldEdit (WorldEdit), FreedomChat, GSit, HeadDatabase, Images, IndividualBoosters, InteractiveChat, InventoryRollbackPlus, ItemFilter, ItemsAdder, Jobs, KeepChunks, KixsChatGames, LibsDisguises, LightAPI, LiteBans, LoneLibs, LuckPerms, MarriageMaster, MeltDown, Minepacks, MobFarmManager, Multiverse-Core, Multiverse-Portals, MyCommand, MyPet, MythicMobs, NexEngine, PartyChat, PlaceholderAPI, PlayerAuctions, PlayerParticles, PlayerReferrals, PlayerVaults, PlayerWarps, PlayTime*, ProtocolLib, PyroFishingPro, PyroLib, PyroMining, Quests, Rankup, RealScoreboard, SafariNet, SCore, ShapedPortals, Shopkeepers, ShulkerPacks, SignEdit, SilkSpawners, spark, StaffChat*, StatTrackers, SurvivalInvisiframes, TAB, Talismans, TogglePvp, Towny, TownyChat, TradeLevels, Vault, VoidGen, VotingPlugin, Vulcan, wood_cutting, WorldGuard, WorldGuardExtraFlags, XPStorage

     

     

    Short Stacktrace / Errorlog (If present)

     N/A

    N/A

     

     

  • View kermitviii's Profile
    kermitviii     added a tag Bug Feb 21, 2023
  • View Lhykos's Profile
    Lhykos posted a comment Feb 22, 2023

    Because Pufferfish is a Paper fork, and the plugin works on Paper,. I don't think it the fault of my plugin. More I suspect a plugin conflict or Pufferfish itself did something different. (Unless the bug exists in Paper too :D)

    Currently I have no time to check this, but will come back to you as soon as possible!

  • View Lhykos's Profile
    Lhykos     self-assigned this issue Feb 22, 2023
  • View Lhykos's Profile
    Lhykos     added the tags Other Plugin Conflict Feb 22, 2023
  • View kermitviii's Profile
    kermitviii posted a comment Feb 22, 2023

    I don't have an extra test server at the moment. However, I'm fairly certain it is only from xp storage

  • View ninjakitty844's Profile
    ninjakitty844 posted a comment Dec 5, 2025

    Tested on Spigot, it is absolutely an issue with the plugin, and it's VERY easy to trigger.

To post a comment, please login or register a new account.