A vulnerability classified as critical was found in Devan-Kerman ARRP up to 0.8.1. Affected by this vulnerability is the function dumpDirect of the component RuntimeResourcePackImpl. The manipulation leads to path traversal.

This vulnerability is known as CVE-2024-24042. The attack can be launched remotely. There is no exploit available.