Description
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.neo4j:neo4j-kernel | >= 4.2.0, < 4.2.8 | 4.2.8 | GHSA-2w4h-f44w-968f |