CVE-2024-47218

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Sep 22, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-472199.8An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection.CVE-2024-47226.1A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affectsCVE-2024-472217.5CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password.CVE-2024-472229.8New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storagCVE-2024-472239.4A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unCVE-2024-472246.5A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unCVE-2024-472265.4A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel viaCVE-2024-472276.1iRedAdmin before 2.6 allows XSS, e.g., via order_name.CVE-2024-47235.4A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some CVE-2024-472386.7Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attackCVE-2024-472396.5Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A remote low privileged aCVE-2024-47245.4A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown functi
CVE-2024-47218: Critical severity, CVSS 9.8 | Vulnix