CVE-2024-47158

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
NEUMANN CO.LTD.	N-LINE	2.0.6 and prior versions

References

https://jvn.jp/en/jp/JVN57285747/Third Party Advisory

Timeline

Published: Oct 25, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471594.3In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project CVE-2024-47166.1A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerabilit CVE-2024-471605.3In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible CVE-2024-471616.5In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API CVE-2024-471625.3In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page CVE-2024-471646.5Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal ch CVE-2024-471655.4Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a n CVE-2024-471665.3Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in t CVE-2024-471679.8Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)**CVE-2024-471684.3Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enable_monitori CVE-2024-471698.8Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 perm CVE-2024-47176.1A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects som