Severity: important

Affected versions:

- Apache HugeGraph-Server 1.0 ~ 1.3 (before 1.5.0)

Description:

Authentication Bypass by Assumed-Immutable Data vulnerability in
Apache HugeGraph-Server.

Users are recommended to upgrade to version 1.5.0, which fixes the issue.

Credit:

L0ne1y (reporter)

References:
- https://hugegraph.apache.org/docs/guides/security/
- https://lists.apache.org/thread/ykzx1076f4mjv0vf19lkz4bgnlb6qx8f
- https://www.cve.org/CVERecord?id=CVE-2024-43441


Apache HugeGraph PPMC

Reply via email to