Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache HugeGraph-Server 1.3.0 Clear all filters
TI-2024-18187 CVE-2024-27349 · GHSA-6mgp-p75r-vhjm

Apache HugeGraph-Server: Bypass whitelist in Auth mode

Priority MEDIUM 49

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01024 Published 2024-04-22 Fixed in 1.3.0 CWE-290
TI-2024-18186 CVE-2024-27348 · GHSA-29rc-vq7f-x335

Apache HugeGraph-Server: Command execution in gremlin

Priority CRITICAL 100KEV

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 &…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9921 Published 2024-04-22 Fixed in 1.3.0 CWE-284