Directory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbitrary code via the loadServerPack in ServerResourcePackProviderMixin.java.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')