CVE-2024-47949

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-23CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-47958.8A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknoCVE-2024-479505.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settingsCVE-2024-479515.4In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settingsCVE-2024-47968.8A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown parCVE-2024-479627.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based bCVE-2024-479637.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object.CVE-2024-479647.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buCVE-2024-479657.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. CVE-2024-479667.8Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a maliciCVE-2024-479674.4Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of serCVE-2024-479684.4Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial oCVE-2024-479696.2Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.
CVE-2024-47949: High severity, CVSS 7.5 | Vulnix