CVE-2025-62784 - CVE House
Back to Database
Status published Medium CVE-2025-62784

InventoryGui allows item duplication in GUIs which use GuiStorageElement

Vulnerability Description

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.5.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-62784

Credits & Attribution

No credits recorded in the NVD database.

References

More from Phoenix616

View All →
CVE-2025-62783
InventoryGui affected by item duplication in GUIs which use GuiStorageElement
Medium 5
CVE-2025-62782
InventoryGUI vulnerable to item duplication via Bundle items when using GuiStorageElement
Medium 5.9

Affected Vendor

Affected Software

InventoryGui
Vulnerable Versions:
< 1.6.5

Timeline

Official Publish: October 27th, 2025
Last Modified: October 28th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-837

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.