CVE-2024-24756 — Crafatar serves Minecraft avatars based on the skin for use in external applications. Files outside of the `lib/public/` directory can be requested from the server. Instances running behind Cloudflare — CVE Database · The Intelligence Room