← back
CVE-2024-22779

CVE-2024-22779

CVSS 8.8 HIGHEPSS 1.9%CWE-22
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.8EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
02 Feb 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Directory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbitrary code via the loadServerPack in ServerResourcePackProviderMixin.java.
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gist.github.com/apple502j/193358682885fe1a6708309ce934e4edhttps://github.com/Kihron/ServerRPExposer/commit/8f7b829df633f59e828d677f736c53652d6f1b8fhttps://modrinth.com/mod/serverrpexposer