Request for Review of Security Fixes Fivem

[wisegroup026]

What happened?

Hello,

I would like to kindly request a review of the following security fixes. These exploits are currently being actively abused by cheaters across many servers, causing instability and negatively impacting the player experience.

At the moment, server owners have no practical way to mitigate these issues other than having these fixes implemented directly in FiveM.

The fixes listed below were developed by @divocbn and provide solutions for vulnerabilities that continue to be actively exploited.

Proposed Fixes
[GTA] [CFX] Remote Player DoS Exploit
https://www.youtube.com/watch?v=kV8yCtxiD2Q
[GTA] [CFX] Passive Mode + Fix
https://www.youtube.com/watch?v=IXXxhkDEt6A
[GTA] [CFX] Susano's New Vehicle Hijack Fix
https://www.youtube.com/watch?v=AVMPGVLQx5s
[GTA] [CFX] Blocking DevTools
https://www.youtube.com/watch?v=C4mx0uxGok4

These exploits continue to be abused on a daily basis and affect servers of all sizes. The fixes were developed around two months ago, but they are still awaiting review and integration into the project.

I kindly ask the team to review these implementations and, if possible, prioritize reviewing and merging them. They are extremely important for reducing the abuse currently affecting the FiveM community and improving the platform's overall security.

Thank you for your time and consideration.

Expected result

.

Reproduction steps

.

Importancy

Slight inconvenience

Area(s)

FiveM, FXServer

Specific version(s)

Fivem

Additional information

.

[wisegroup026]

If you could take a look and pull these commits, it would help our server a lot. We'd really appreciate it. Thank you in advance! @radium-cfx @prikolium-cfx @nihonium-cfx @FabianTerhorst

[ook3D]

If you could take a look and pull these commits, it would help our server a lot. We'd really appreciate it. Thank you in advance! @radium-cfx @prikolium-cfx @nihonium-cfx @FabianTerhorst

You realize almost all of these fixes are already merged right? Maybe follow the commit history beforehand

Edit: apparently not lmao

[wisegroup026]

@ook3D I still haven't been able to find the four fixes I mentioned above in the commit history. I only found the previous fixes that you had already made. I haven't seen these new ones yet, although it's possible I may have overlooked them.

If they've already been merged, or if you know they've already been added, could you please send me the commits or the links to the changes?

[ook3D]

@ook3D I still haven't been able to find the four fixes I mentioned above in the commit history. I only found the previous fixes that you had already made. I haven't seen these new ones yet, although it's possible I may have overlooked them.

If they've already been merged, or if you know they've already been added, could you please send me the commits or the links to the changes?

I for some reason remember them being merged but seems they weren't actually sorry

[Mellowtri]

@ook3D I still haven't been able to find the four fixes I mentioned above in the commit history. I only found the previous fixes that you had already made. I haven't seen these new ones yet, although it's possible I may have overlooked them.
If they've already been merged, or if you know they've already been added, could you please send me the commits or the links to the changes?

I for some reason remember them being merged but seems they weren't actually sorry

They may have hidden the commit, the latest github changes say artifact 31623, but a newer one called 31689 exist

[imLocutor]

so, as @ook3D already said, some of them are not really applied, so i would gently mention u guys to take a look again to that and also other reports about crashing exploits, for example rn we have a exploit causing the error ERR_GEN_MAP, basically using variation, they change clothes and skin/character details like hair and stuff, looping this they make some players crash with that specific error but not everyone so ig that high end pc's dont have problems but mid and low end does, once again, please take a look into that guys, thanks.

@prikolium-cfx @radium-cfx @nihonium-cfx

[divocbn]

From what I have heard, they are focusing on Enhanced for now; I guess all we can do is wait 😁
If everyone tags the team members, I think the only effect it has is that they get annoyed

[wisegroup026]

@prikolium-cfx Hello! If possible, could you please take a look at the fixes and merge them along with the commits you pulled today? I would really appreciate it. Thank you for your time and attention!