Skip to content
OpenAdvisories

Package · Maven

org.neo4j.procedure:apoc

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    GHSA-9vx8-f5c4-862x

    XML External Entity (XXE) vulnerability in apoc.import.graphml

    ### Impact A XML External Entity (XXE) vulnerability found in the apoc.import.graphml procedure of APOC core plugin in Neo4j graph database. XML External Entity (XXE) injection occurs when the XML parser allows external entities to be resolved. The XML parser…

    org.neo4j.procedure:apoc Maven
  • Medium —
    CVE-2022-37423

    Neo4j Graph apoc plugins Partial Path Traversal Vulnerability

    Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.

    org.neo4j.procedure:apoc Maven