vulnerability

Apache HugeGraph: CVE-2024-27348: Improper Access Control

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 22, 2024
Added
Jul 19, 2024
Modified
Jul 2, 2025

Description

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 and Java11

Users are recommended to upgrade to version 1.3.0 with Java11 and enable the Auth system, which fixes the issue.

Solution

apache-hugegraph-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.