Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS02bWdwLXA3NXItdmhqbc4AA7O6
Apache HugeGraph-Server: Bypass whitelist in Auth mode
Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0.
Users are recommended to upgrade to version 1.3.0, which fixes the issue.
Permalink: https://github.com/advisories/GHSA-6mgp-p75r-vhjmJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02bWdwLXA3NXItdmhqbc4AA7O6
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 11 days ago
Updated: 1 day ago
CVSS Score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Identifiers: GHSA-6mgp-p75r-vhjm, CVE-2024-27349
References:
- https://nvd.nist.gov/vuln/detail/CVE-2024-27349
- https://lists.apache.org/thread/dz9n9lndqfsf64t72o73r7sttrc6ocsd
- https://github.com/apache/incubator-hugegraph/commit/713d88d1fd9953c3c3e3f130389501910ba40e1d
- http://www.openwall.com/lists/oss-security/2024/04/22/4
- https://github.com/advisories/GHSA-6mgp-p75r-vhjm
Blast Radius: 1.0
Affected Packages
maven:org.apache.hugegraph:hugegraph-api
Affected Version Ranges: >= 1.0.0, < 1.3.0Fixed in: 1.3.0