Threat Investigation
Request a demo

CVE-2025-62782

Medium

Description

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.4-SNAPSHOT.

SeverityMedium
CVSS5.3
Exploit probability—
ProductPhoenix616 Inventorygui
PublishedOct 27, 2025
First seenOct 27, 2025
Weakness typeCWE-837CWE-837

How to fix

Update
  • phoenix616 inventorygui1.6.4 or later
  • de.themoep:inventorygui1.6.4-SNAPSHOT or later

Affected products

ProductAffected versionsFixed in
phoenix616 inventoryguiv < 1.6.41.6.4
de.themoep:inventoryguiMavenv < 1.6.4-SNAPSHOT1.6.4-SNAPSHOT

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.