CVE-2024-24042: Devan-Kerman Arrp

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component.

Affected products

• Devan-Kerman Arrp: version 0.8.1 only

Published 2024-03-19. Last modified 2026-06-17.