CVEvulnerability

CVE-2025-61680

6.6 MEDIUM Published 2025-10-03 Modified 2026-10-08 Official page ↗

Status: Deferred
Published: 2025-10-03
Last modified: 2026-10-08
Assigner: [email protected]
CVSS 4.0 ([email protected]): 6.6 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses: CWE-256

Description

Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0.

Weakness · CWE (1)

CWE-256 Plaintext Storage of a Password weakness

References

https://github.com/jaketcooper/Minecraft-rcon/commit/31272b541482d095d1578855c2b571268eb9b877 github.com
https://github.com/jaketcooper/Minecraft-rcon/releases/tag/2.1.0 github.com
https://github.com/jaketcooper/Minecraft-rcon/security/advisories/GHSA-4m33-hxqw-7j77 github.com

CVE-2025-61680

Description

Related

Weakness · CWE (1)

References