CVE-2024-27348

2024-04-2214:15:07

[email protected]

web.nvd.nist.gov

apache hugegraph-server

remote command execution

cve-2024-27348

java8

java11

upgrade

auth system

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.1%

JSON

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11

Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.

Affected configurations

Vulners

Node

apacheapache_http_serverRange≤1.3.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HugeGraph-Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.3.0",
        "status": "affected",
        "version": "1.0.0",
        "versionType": "semver"
      }
    ]
  }
]