CVE-2024-47579

CVE-2024-47579 describes a critical vulnerability in SAP NetWeaver where an authenticated administrator can exploit an exposed webservice to read arbitrary files on the server. By uploading an internal file as a custom PDF font and then downloading it, an attacker can exfiltrate sensitive data. This medium-severity vulnerability has a CVSS score of 6.8, indicating high confidentiality impact with no integrity or availability compromise, and requires high privileges for exploitation. While no public exploit code or active exploitation has been observed, there is limited community discussion and media coverage, including a SecurityWeek article.