Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-27347 EUVD-2024-1138GHSA-77x4-55q7-4vmj

Apache HugeGraph-Hubble: SSRF in Hubble connection page

Published Apr 22, 2024 · Updated Feb 13, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache HugeGraph-Hubble Package: org.apache.hugegraph:hugegraph-hubble Ecosystem: Maven

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache HugeGraph-Hubble 1.0.0 – < 1.3.0 1.3.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.hugegraph:hugegraph-hubble >= 1.0.0, < 1.3.0 1.3.0 GHSA-77x4-55q7-4vmj

References