Filtered by vendor Apache Subscriptions
Filtered by product Hugegraph-server Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-27349 1 Apache 1 Hugegraph-server 2024-11-22 9.1 Critical
Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.
CVE-2024-27348 2 Apache, Oracle 4 Hugegraph, Hugegraph-server, Jdk and 1 more 2024-11-21 9.8 Critical
RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.