CVE-2024-33369

The vulnerability CVE-2024-33369 affects Plasmoapp RPShare Fabric mod version 1.0.0. A directory traversal flaw exists in the getFileNameFromConnection method of DownloadTask, enabling a remote attacker to execute arbitrary code. Affected component is the RPShare Fabric mod; root cause is imprope...

CVE-2024-33368

Plasmoapp RPShare Fabric mod v1.0.0 is affected. The vulnerability allows a remote attacker to execute arbitrary code via the build method in DonwloadPromptScreen, as described across multiple sources referencing CVE-2024-33368. The issue’s impact is described as high (CVE notes high confidential...