search

ks-hl / AuxProtect

Data Logging and Inventory Recovery plugin designed to suplement CoreProtect
25 stars 8 forks source link

[Privacy Issue] Copy IP in a:session with denied permission #19

Closed Daechler closed 7 months ago

Daechler commented 8 months ago

You can copy the IP of a user with a:session, although the permission to do so has been denied.

Recreate:

  1. deny the auxprotect.lookup.action.session.ip permission
  2. make a lookup (e.g. /ap lookup user:Daechler action:session)
  3. click on [REDACTED]
  4. you have successfully copied the IP
ks-hl commented 8 months ago

Good catch. Will fix soon