Lucene search
+L

292 matches found

OSV
OSV
•added 2024/04/22 3:30 p.m.•41 views

GHSA-77X4-55Q7-4VMJ Apache HugeGraph-Hubble: SSRF in Hubble connection page

Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble. This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

5.3CVSS5.1AI score0.00995EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/04/22 3:30 p.m.•31 views

Apache HugeGraph-Hubble: SSRF in Hubble connection page

Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble. This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

5.3CVSS5.2AI score0.00995EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/04/22 2:15 p.m.•27 views

CVE-2024-27347

Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

5.3CVSS6.5AI score0.00995EPSS
SaveExploits0References2
OSV
OSV
•added 2024/04/22 2:15 p.m.•14 views

CVE-2024-27347

Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

5.3CVSS5.8AI score0.00995EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/22 2:07 p.m.•90 views

CVE-2024-27347

Apache HugeGraph-Hubble is vulnerable to a Server-Side Request Forgery (SSRF) flaw in versions 1.0.0 before 1.3.0 . The root cause is inadequate improper input validation , which allows an attacker to use specially crafted parameters to send requests to internal or restricted network resources. T...

5.3CVSS5.2AI score0.00995EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/04/22 2:07 p.m.•32 views

CVE-2024-27347 Apache HugeGraph-Hubble: SSRF in Hubble connection page

Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

6.8AI score0.00995EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/22 2:07 p.m.•14 views

CVE-2024-27347 Apache HugeGraph-Hubble: SSRF in Hubble connection page

Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

5.2AI score0.00995EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•24 views

PT-2024-21838 · Apache · Apache Hugegraph-Hubble

Name of the Vulnerable Software and Affected Versions: Apache HugeGraph-Hubble versions 1.0.0 through 1.2.x Description: A Server-Side Request Forgery SSRF issue affects the software, allowing unauthorized access to internal resources. Users are advised to upgrade to a fixed version to resolve th...

5.3CVSS7.3AI score0.00995EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/04/22 12:00 a.m.•14 views

Apache HugeGraph 代码问题漏洞

Apache HugeGraph is a fast and scalable graph database from the Apache USA Foundation. Apache HugeGraph-Hubble suffers from a server-side request forgery vulnerability that can be exploited by an attacker to conduct SSRF attacks through the use of specially crafted parameters...

5.3CVSS6.8AI score0.00995EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•6 views

CVE-2024-27347: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue...

5.3CVSS5.8AI score0.00995EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2024/04/17 6:21 p.m.•6 views

@hubbleprotocol/hubble-sdk (>=1.0.48, <=2.0.24), @streamflow/stream (>=3.0.14-dev, <=3.0.19) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.42.0)

@solana/web3.js NPM version 1.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @hubbleprotocol/hubble-sdk =1.0.48, =3.0.14-dev, =2.0.0-rc.1, =2.0.2 Source cves: CVE-2024-30253 Source advisory:...

7.5CVSS5.4AI score0.00593EPSS
SaveExploits0
Chainguard
Chainguard
•added 2024/03/28 5:27 p.m.•13 views

GHSA-PWQM-X5X6-5586 vulnerabilities

Vulnerabilities for packages: hubble-ui...

5.3AI score
SaveExploits0
Wolfi
Wolfi
•added 2024/03/28 5:27 p.m.•18 views

GHSA-PWQM-X5X6-5586 vulnerabilities

Vulnerabilities for packages: hubble-ui...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2024/03/27 7:15 p.m.•44 views

CVE-2024-28860 vulnerabilities

Vulnerabilities for packages: hubble-ui...

8CVSS7.5AI score0.00172EPSS
SaveExploits0
Wolfi
Wolfi
•added 2024/03/27 7:15 p.m.•179 views

CVE-2024-28860 vulnerabilities

Vulnerabilities for packages: hubble-ui...

8CVSS7.5AI score0.00172EPSS
SaveExploits0
Chainguard
Chainguard
•added 2024/03/18 10:15 p.m.•50 views

CVE-2024-28250 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

6.1CVSS6.3AI score0.00172EPSS
SaveExploits0
Chainguard
Chainguard
•added 2024/03/18 10:15 p.m.•33 views

CVE-2024-28249 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

6.1CVSS6.3AI score0.00271EPSS
SaveExploits0
Wolfi
Wolfi
•added 2024/03/18 10:15 p.m.•40 views

CVE-2024-28248 vulnerabilities

Vulnerabilities for packages: hubble-ui...

7.2CVSS7.2AI score0.0062EPSS
SaveExploits0
Chainguard
Chainguard
•added 2024/03/18 10:15 p.m.•43 views

CVE-2024-28248 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

7.2CVSS7.2AI score0.0062EPSS
SaveExploits0
Wolfi
Wolfi
•added 2024/03/18 10:15 p.m.•188 views

CVE-2024-28249 vulnerabilities

Vulnerabilities for packages: hubble-ui...

6.1CVSS6.4AI score0.00271EPSS
SaveExploits0
Rows per page
Query Builder