CVE-2024-47558

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Authenticated RCE via Path Traversal

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Oct 7, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-475598.8Authenticated RCE via Path TraversalCVE-2024-47565.4The WP Backpack WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2024-475607.8RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended CVE-2024-475617.3Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommendeCVE-2024-475628.8A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralizeCVE-2024-475635.3A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate aCVE-2024-475654.3A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate tCVE-2024-475666.0A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.CVE-2024-475694.3A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, CVE-2024-47578.1The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as eCVE-2024-475706.6An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all verCVE-2024-475719.8An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper acc
CVE-2024-47558: High severity, CVSS 8.8 | Vulnix