Package · Maven

org.apache.hugegraph:hugegraph-api

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.1

CVE-2024-27349

Apache HugeGraph-Server: Bypass whitelist in Auth mode

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-api Maven

Apr 22, 2024
Critical 9.8

CVE-2024-27348 Exploited Public exploit EPSS 99%

Apache HugeGraph-Server: Command execution in gremlin

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the…

Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-api org.apache.hugegraph:hugegraph-core Maven

Apr 22, 2024
KEV Sep 18, 2024