Neo4j Cypher component mishandles IMMUTABLE privileges

2024-05-0718:30:34

Google

osv.dev

neo4j

cypher

mishandles

immutable

privileges

software

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

The Cypher component in Neo4j before 5.19.0 mishandles IMMUTABLE privileges.

CPENameOperatorVersion
org.neo4j:neo4j-cyphereq3.4.0-beta02
org.neo4j:neo4j-cyphereq3.3.0-alpha03
org.neo4j:neo4j-cyphereq4.3.16
org.neo4j:neo4j-cyphereq3.1.0-M06
org.neo4j:neo4j-cyphereq3.4.0-alpha09
org.neo4j:neo4j-cyphereq3.5.15
org.neo4j:neo4j-cyphereq3.2.4
org.neo4j:neo4j-cyphereq4.2.15
org.neo4j:neo4j-cyphereq3.0.2
org.neo4j:neo4j-cyphereq5.7.0

Name	Operator	Version
org.neo4j:neo4j-cypher	eq	3.4.0-beta02
org.neo4j:neo4j-cypher	eq	3.3.0-alpha03
org.neo4j:neo4j-cypher	eq	4.3.16
org.neo4j:neo4j-cypher	eq	3.1.0-M06
org.neo4j:neo4j-cypher	eq	3.4.0-alpha09
org.neo4j:neo4j-cypher	eq	3.5.15
org.neo4j:neo4j-cypher	eq	3.2.4
org.neo4j:neo4j-cypher	eq	4.2.15
org.neo4j:neo4j-cypher	eq	3.0.2
org.neo4j:neo4j-cypher	eq	5.7.0