Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/12 12:30 p.m.11 views

GHSA-Q37J-3367-FWV7 Apache HugeGraph-Server: RAFT and deserialization vulnerability

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

9.3CVSS8.6AI score0.00904EPSS
SaveExploits0References5
Rows per page
Query Builder