VDB
CVE-2024-47579
CVE-2024-47579
PUBLISHED
CVSS 6.800000190734863 MEDIUM
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
EPSS 0.54% · 42.7th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.54%
42.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | SAP NetWeaver AS for JAVA (Adobe Document Services) | ADSSSAP 7.50 |
Timeline
- Dec 10, 2024 CVE Published
- Dec 10, 2024 EPSS Score
- Dec 10, 2024 PoC Published
- Dec 10, 2024 PoC Published
- Dec 27, 2024 EPSS Score
- Jan 13, 2025 EPSS Score
- Jan 29, 2025 EPSS Score
- Feb 15, 2025 EPSS Score
- Mar 4, 2025 EPSS Score
- Mar 21, 2025 EPSS Score
- Apr 1, 2025 Coalition ESS Score
- Apr 7, 2025 EPSS Score