Skip to content

Product

org.apache.hugegraph/hugegraph-core vulnerabilities

1 published CVE affecting org.apache.hugegraph/hugegraph-core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
1

Latest org.apache.hugegraph/hugegraph-core CVEs

Newest publication first

  1. CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin

    Published
    CriticalCVSS 9.8 EPSS 99.2% CISA KEV added 2024-09-18 Exploited in the wild Framework module Public exploit

    RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.