Lucene search

GoogleOSV:CVE-2022-37423

HistoryAug 12, 2022 - 3:15 p.m.

CVE-2022-37423

2022-08-1215:15:16

Google

osv.dev

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

60.1%

JSON

Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.

CPENameOperatorVersion
neo4j-apoc-procedureseq3.1.0.2
neo4j-apoc-procedureseq4.3.0-rc01
neo4j-apoc-procedureseq3.5.0.2
neo4j-apoc-procedureseq4.3.0.0
neo4j-apoc-procedureseq3.5.0.0
neo4j-apoc-procedureseq3.4.0.2
neo4j-apoc-procedureseq4.3.0.5
neo4j-apoc-procedureseq4.0.0.0
neo4j-apoc-procedureseq3.1.0.4
neo4j-apoc-procedureseq3.1.2.5

Name	Operator	Version
neo4j-apoc-procedures	eq	3.1.0.2
neo4j-apoc-procedures	eq	4.3.0-rc01
neo4j-apoc-procedures	eq	3.5.0.2
neo4j-apoc-procedures	eq	4.3.0.0
neo4j-apoc-procedures	eq	3.5.0.0
neo4j-apoc-procedures	eq	3.4.0.2
neo4j-apoc-procedures	eq	4.3.0.5
neo4j-apoc-procedures	eq	4.0.0.0
neo4j-apoc-procedures	eq	3.1.0.4
neo4j-apoc-procedures	eq	3.1.2.5

Rows per page:

1-10 of 421

References

github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-78f9-745f-278p

neo4j.com/docs/aura/platform/apoc/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

60.1%

JSON

Related for OSV:CVE-2022-37423