First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-47159

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
JetBrains	YouTrack	< 2024.3.44799

References

https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory

Timeline

Published: Sep 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-47166.1A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerabilit CVE-2024-471605.3In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible CVE-2024-471616.5In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API CVE-2024-471625.3In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page CVE-2024-471646.5Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal ch CVE-2024-471655.4Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a n CVE-2024-471665.3Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in t CVE-2024-471679.8Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)**CVE-2024-471684.3Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enable_monitori CVE-2024-471698.8Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 perm CVE-2024-47176.1A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects som CVE-2024-471704.3Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 perm

CVE-2024-47159: Medium severity, CVSS 4.3 | Vulnix