mojira.dev
MCPE-136930

/getlocalplayername and /geteduclientinfo commands are available outside of Education Edition

Summary
The /getlocalplayername, and /geteduclientinfocan show up in the chat syntax outside Education Edition. When triggering it, it would show an error since the player isn't on the Education Edition.

Step to Reproduce
1. Type "/getlocalplayername" or "/geteduclientinfo" in the chat.

Expected Results
The "/getlocalplayername" and "/geteduclientinfo" command should not show up in the syntax on non-Education Edition world.

Observed Results
It showed up.

Original Description
Conditions: Bedrock Edition without the "Education Edition" feature Type the full/getlocalplayername command in the chat bar Version 1.17.10 Single Player Game Effect: Syntax can be displayed Error reported after output   The vulnerability is caused by trying to see if this command can be executed in the world of Bedrock Edition, where the "Education Edition" feature is not enabled

Attachments

Comments 1

can confirm it is an issue and /geteduclientinfo is the same

teaSummer

(Unassigned)

583311, 1444093

Confirmed

Multiple

Android 9.1

1.17.20.23 Beta, 1.17.20.22 Beta, 1.17.10, 1.21.21 Hotfix

1.21.110.25 Preview

Retrieved