~ / search / GHSA-cg24-jjr5-rxmf

GHSA-cg24-jjr5-rxmf

Path traversal in flaskcode Devan-Kerman ARRP

Source: GitHub Advisory Database (reviewed) High CVE-2024-24042

Packages

EcosystemPackageAffectedFixed in
Maven net.devtech:arrp < 0.8.2 0.8.2

Details

As written in the advisory (Markdown source, shown as plain text).

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component.

References

External links from the advisory. They lead to third-party sites.