hugegraph-server vulnerabilities

2 known vulnerabilities in hugegraph-server from Apache. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Apache HugeGraph-Server: Authentication Bypass by Spoofing

  CVE-2024-27349Apr 22, 2024ApacheEPSS 1.02%

  Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

• 9.8 Critical severity

  Apache HugeGraph-Server Improper Access Control Exploited

  CVE-2024-27348Apr 22, 2024ApacheEPSS 99.2%

  RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the