CVE-2024-47560

RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry.

• CWE-863

• https://jscom.jp/news-20240918/
• https://jvn.jp/en/jp/JVN39280069/

Published

Oct 1, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47555Missing Authentication - User & System Configuration8.3
• CVE-2024-47556Pre-Auth RCE via Path Traversal9.8
• CVE-2024-47557Pre-Auth RCE via Path Traversal9.8
• CVE-2024-47558Authenticated RCE via Path Traversal8.8
• CVE-2024-47559Authenticated RCE via Path Traversal8.8
• CVE-2024-4756The WP Backpack WordPress plugin through 2.1 does not saniti…5.4
• CVE-2024-47561Schema parsing in the Java SDK of Apache Avro 1.11.3 and pre…9.2
• CVE-2024-47562A vulnerability has been identified in SINEC Security Monito…8.8
• CVE-2024-47563A vulnerability has been identified in SINEC Security Monito…5.3
• CVE-2024-47565A vulnerability has been identified in SINEC Security Monito…4.3
• CVE-2024-47566A improper limitation of a pathname to a restricted director…6
• CVE-2024-47569A insertion of sensitive information into sent data vulnerab…4.3