CVE-2024-35474
A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose files on the server, via setPath in ResourcePackFileServer.kt.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Deferred - cve@mitre.org
- Published
- 2024-06-10
- Last modified
- 2024-10-29
- Weaknesses
- CWE-22
References
- https://gist.github.com/apple502j/e99ca3a00e492bf1c942214b13213b46
