Skip to content
OpenAdvisories
Medium CVE-2022-37423 EUVD-2022-6501GHSA-78f9-745f-278p

Neo4j Graph apoc plugins Partial Path Traversal Vulnerability

Published Aug 12, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Package: org.neo4j.procedure:apoc Ecosystem: Maven

Description

Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.neo4j.procedure:apoc >= 4.4.0.0, < 4.4.0.8 4.4.0.8 GHSA-78f9-745f-278p
Maven org.neo4j.procedure:apoc < 4.3.0.7 4.3.0.7 GHSA-78f9-745f-278p

References