CVE-2024-47218

An authentication bypass vulnerability exists in vesoft NebulaGraph versions through 3.8.0 . This flaw allows an attacker to circumvent security controls to gain unauthorized access. To resolve this issue, users are recommended to update to a version later than 3.8.0 . No additional mitigation me...

CVE-2024-47219

An issue was discovered in vesoft NebulaGraph versions through 3.8.0 that allows shell command injection (CWE-94). This vulnerability allows an attacker to execute arbitrary shell commands on the underlying system. The impact is characterized by high severity, affecting confidentiality, integrity...