First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-47162

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
JetBrains	YouTrack	< 2024.3.44799

References

https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory

Timeline

Published: Sep 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471646.5Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal ch CVE-2024-471655.4Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a n CVE-2024-471665.3Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in t CVE-2024-471679.8Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)**CVE-2024-471684.3Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enable_monitori CVE-2024-471698.8Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 perm CVE-2024-47176.1A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects som CVE-2024-471704.3Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 perm CVE-2024-471714.3Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 perm CVE-2024-471725.4Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT accoun CVE-2024-471735.5Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2 CVE-2024-471745.9Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, `<nix/fetchurl.

CVE-2024-47162: Medium severity, CVSS 5.3 | Vulnix