com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.1.0 <=2.1.0-RC2), io.github.qsy7.java.dependencies:neo4j (=0.3.3) +29 more potentially affected by CVE-2024-34517 via org.neo4j:neo4j-cypher (>=5.10.0 <=5.18.1)

org.neo4j:neo4j-cypher MAVEN version =5.10.0, =2.1.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.0, =5.10.1, =5.18.0 and more Source cves: CVE-2024-34517 Source advisory: OSV:GHSA-P343-9QWP-PQXV...

GHSA-P343-9QWP-PQXV vulnerabilities

Vulnerabilities for packages: neo4j...

Neo4j Cypher component mishandles IMMUTABLE privileges

The Cypher component in Neo4j between v.5.0.0 and v.5.19.0 mishandles IMMUTABLE...

GHSA-P343-9QWP-PQXV Neo4j Cypher component mishandles IMMUTABLE privileges

The Cypher component in Neo4j between v.5.0.0 and v.5.19.0 mishandles IMMUTABLE...

CVE-2024-34517 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2024-34517 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517

Summary: CVE-2024-34517 affects the Cypher component in Neo4j 5.0.0–5.19.0, where IMMUTABLE privileges can be mishandled in certain scenarios if an attacker already has admin access. The issue is documented across multiple sources (CVE entry, RH advisory, GHSA, OSV references). Impact (as stated)...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

Neo4j 安全漏洞

Neo4j is a Java-based and fully ACID-compatible graphical database from Neo4j, Inc. that supports data migration, add-ons, and more. A security vulnerability exists in Neo4j versions prior to 5.19.0 that stems from the Cypher component incorrectly handling IMMUTABLE permissions...

CVE-2024-34517

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...

This Week in Spring - April 30th, 2024

Welcome to yet another amazing installment of This Week in Spring! As usual, we've got a ton of stuff to get into, so let's dive right into it! Chris Bono announces the new versions of Spring Functions Catalog and Spring Cloud Streams Applications In last week's installment of A Bootiful Podcast,...

BIT-NEO4J-2021-34371

Neo4j through 3.4.18 with the shell server enabled exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains...

BloodHound - Six Degrees Of Domain Admin

BloodHound is a monolithic web application composed of an embedded React frontend with Sigma.js and a Go based REST API backend. It is deployed with a Postgresql application database and a Neo4j graph database, and is fed by the SharpHound and AzureHound data collectors. BloodHound uses graph...

GHSA-RGGV-CV7R-MW98 vulnerabilities

Vulnerabilities for packages: solr...

CVE-2024-22201 vulnerabilities

Vulnerabilities for packages: solr...

CVE-2024-22201 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-4265-CCF5-PHJ5 vulnerabilities

Vulnerabilities for packages: opensearch, trino, dependency-track, druid, celeborn, spdx-tools-java, wavefront-proxy, gradle, tez...

GHSA-4265-CCF5-PHJ5 vulnerabilities

Vulnerabilities for packages: tez, hadoop-client-modules, druid, kayenta-fips, dependency-track, wavefront-proxy, celeborn, elasticsearch, opensearch, trino, spdx-tools-java, gradle, hadoop-fips, kayenta...