CVE-2024-47219 in github.com/vesoft-inc/nebula

严重 9.8CVE-2024-47219 · GO-2024-3156 · Published 22/09/2024 · updated 17/06/2026

要点

CVE-2024-47219 是影响 github.com/vesoft-inc/nebula, nebulagraph database (vesoft) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.2%，高于 68.4% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
github.com/vesoft-inc/nebula Go	`all versions`	No fix yet
nebulagraph database vesoft	`≤ 3.8.0`	No fix yet

NVD description

An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.