Vulnerability feed

Vulnerability

CVE-2024-27348

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-27348
Description:: RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.
Last updated date:: 12/16/2024

Reports

alt

ACTIVELY EXPLOITED

Type:: exploitation
Confidence:: HIGH
Date of publishing:: 09/18/2024
Reference url to background: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Type:: exploit
Confidence:: HIGH
Date of publishing:: 05/31/2024
Reference url to background: https://github.com/Zeyad-Azima/CVE-2024-27348

Type:: exploit
Confidence:: HIGH
Date of publishing:: 06/03/2024
Reference url to background: https://github.com/kljunowsky/CVE-2024-27348

Type:: exploit
Confidence:: HIGH
Date of publishing:: 06/12/2024
Reference url to background: https://github.com/jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE

Type:: exploit
Confidence:: HIGH
Date of publishing:: 08/13/2024
Reference url to background: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_hugegraph_gremlin_rce.rb

Type:: exploit
Confidence:: HIGH
Date of publishing:: 12/16/2024
Reference url to background: https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-apache-hugegraph-server-cve-2024-27348

Vulnerability Feed Contributors About Blog

@inTheWild

©2024 |