Skip to content
OpenAdvisories

Vendor

Arangodb

3 known vulnerabilities.

Products

arangodb 2 ArangoDB Community Edition 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2021-25939

    ArangoDB - Blind SSRF when Downloading Foxx Service from URL

    In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused by a highly-privileg…

    Arangodb arangodb