CVE-2024-1630

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
May 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-16319.1Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32CVE-2024-16326.5Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.CVE-2024-16332.0During the secure boot, bl2 (the second stage of the bootloader) loops over images defined in the table “bl2_mem_params_descs”. For each imaCVE-2024-16346.5The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabiCVE-2024-16357.5A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a maliciCVE-2024-16365.4Potential Cross-Site Scripting (XSS) in the page editing area.CVE-2024-16374.3The 360 Javascript Viewer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and noncCVE-2024-16389.1The documentation specifies that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC defines for a Bluetooth characteristic: Attribute reCVE-2024-16396.5The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on tCVE-2024-16405.3The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulneCVE-2024-16415.4The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check oCVE-2024-16424.3The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to Cross-Site Request Forgery
CVE-2024-1630: High severity, CVSS 7.7 | Vulnix