CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

EUVD-2024-1703

Malicious code in bioql PyPI...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

PT-2024-25944

Name of the Vulnerable Software and Affected Versions Neo4j versions 5.0.0 through 5.19.0 Description The Cypher component in Neo4j mishandles IMMUTABLE privileges. Recommendations For versions 5.0.0 through 5.19.0, update to a version that contains a fix for this issue. At the moment, there is n...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517

Summary: CVE-2024-34517 affects the Cypher component in Neo4j 5.0.0–5.19.0, where IMMUTABLE privileges can be mishandled in certain scenarios if an attacker already has admin access. The issue is documented across multiple sources (CVE entry, RH advisory, GHSA, OSV references). Impact (as stated)...

CVE-2024-34517: Modification of Assumed-Immutable Data (MAID)

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...