CVE-2024-22779

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-22779

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22779.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-22779

Published

2024-02-02T00:00:00Z

Modified

2026-07-22T02:50:56.451986Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R CVSS Calculator

Summary

[none]

Details

Directory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbitrary code via the loadServerPack in ServerResourcePackProviderMixin.java.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22779.json"
}

References

Affected packages

Git / github.com/kihron/serverrpexposer

Affected ranges

Type

GIT

Repo

https://github.com/kihron/serverrpexposer

Events

Introduced

Fixed

8f7b829df633f59e828d677f736c53652d6f1b8f

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22779.json"

vanir_signatures_modified

"2026-07-22T02:50:56Z"

vanir_signatures

[
    {
        "digest": {
            "line_hashes": [
                "172907947846973739225486654491908463847",
                "169339702739663634657435148195649668737",
                "27944832001892353806432056833826041660",
                "89200089313113562177780427530136599996"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2024-22779-1b5fc8b5",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kihron/serverrpexposer/commit/8f7b829df633f59e828d677f736c53652d6f1b8f",
        "target": {
            "file": "src/main/java/com/kihron/serverrpexposer/mixins/ServerResourcePackProviderMixin.java"
        }
    },
    {
        "digest": {
            "length": 1398.0,
            "function_hash": "121567705243012172053939970764529764805"
        },
        "deprecated": false,
        "id": "CVE-2024-22779-79bf69e4",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kihron/serverrpexposer/commit/8f7b829df633f59e828d677f736c53652d6f1b8f",
        "target": {
            "function": "loadServerPack",
            "file": "src/main/java/com/kihron/serverrpexposer/mixins/ServerResourcePackProviderMixin.java"
        }
    }
]