CVE-2024-27349

CWE-2904 documents4 sources
Severity
9.1CRITICAL
EPSS
0.4%
top 36.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apache Software Foundation Apache Hugegraph-serverApache Hugegraph
Timeline
PublishedApr 22

Description

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 3.9 | Impact: 5.2

Affected Packages3 packages

▶NVDapache/hugegraph1.0.0 — 1.3.0
▶Mavenorg.apache.hugegraph:hugegraph-api1.0.0 — 1.3.0

🔴Vulnerability Details

3
OSV
Apache HugeGraph-Server: Bypass whitelist in Auth mode↗2024-04-22
▶
GHSA
Apache HugeGraph-Server: Bypass whitelist in Auth mode↗2024-04-22
▶
CVEList
Apache HugeGraph-Server: Bypass whitelist in Auth mode↗2024-04-22
▶
CVE-2024-27349 (CRITICAL CVSS 9.1) | Authentication Bypass by Spoofing v | cvebase.io