Directory traversal

2022-03-0102:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.7%

JSON

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1.

CPENameOperatorVersion
awesome_proceduresge4.4.0.0
awesome_procedureslt4.4.0.1
awesome_proceduresge4.3.0.0
awesome_procedureslt4.3.0.4
awesome_proceduresge4.2.0.0
awesome_procedureslt4.2.10
awesome_procedureslt3.5.0.17

Name	Operator	Version
awesome_procedures	ge	4.4.0.0
awesome_procedures	lt	4.4.0.1
awesome_procedures	ge	4.3.0.0
awesome_procedures	lt	4.3.0.4
awesome_procedures	ge	4.2.0.0
awesome_procedures	lt	4.2.10
awesome_procedures	lt	3.5.0.17