30 matches found
CVE-2024-47219
An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection...
CVE-2024-47219
Affected software: vesoft NebulaGraph up to version 3.8.0. Issue: shell command injection. Impact details are described in the CVSS metrics (C/H, I/H, A/H). Remediation: upgrade to a version later than 3.8.0 as recommended by PT-2024-32482 and related advisories.
CVE-2023-36088
Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...
Server side request forgery (ssrf)
Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...
PT-2023-25425 · Unknown · Nebulagraph Studio
Name of the Vulnerable Software and Affected Versions: NebulaGraph Studio version 3.7.0 Description: The issue allows remote attackers to gain sensitive information due to a Server Side Request Forgery SSRF vulnerability. Recommendations: For NebulaGraph Studio version 3.7.0, at the moment, there...
CVE-2023-36088
NebulaGraph Studio 3.7.0 is affected by a Server Side Request Forgery (SSRF) vulnerability. Connected sources consistently describe SSRF leading to sensitive information disclosure. The exact root cause within the implementation, affected components, and a formal remediation/fix version are not d...
CVE-2023-36088
Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...
CVE-2023-36088
Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...
NebulaGraph Studio Code Issue Vulnerability
NebulaGraph Studio is a web-based graph database visualization tool from NebulaGraph, Inc. A security vulnerability exists in NebulaGraph Studio version 3.7.0 that originates from allowing remote attackers to obtain sensitive information...
