Product · Apache Software Foundation

Apache HugeGraph-Server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2024-43441 EPSS 73%

Apache HugeGraph-Server: Fixed JWT Token(Secret)

Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-server Maven

Dec 24, 2024
Critical 9.1

CVE-2024-27349

Apache HugeGraph-Server: Bypass whitelist in Auth mode

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-api Maven

Apr 22, 2024
Critical 9.8

CVE-2024-27348 Exploited Public exploit EPSS 99%

Apache HugeGraph-Server: Command execution in gremlin

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the…

Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-api org.apache.hugegraph:hugegraph-core Maven

Apr 22, 2024
KEV Sep 18, 2024