Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.
References
| Link | Resource |
|---|---|
| https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-78f9-745f-278p | Exploit Third Party Advisory |
| https://neo4j.com/docs/aura/platform/apoc/ | Product Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Aug 2022, 15:29
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:neo4j:awesome_procedures_on_cypher:*:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-78f9-745f-278p - Exploit, Third Party Advisory | |
| References | (MISC) https://neo4j.com/docs/aura/platform/apoc/ - Product, Vendor Advisory |
12 Aug 2022, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-12 15:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-37423
Mitre link : CVE-2022-37423
CVE.ORG link : CVE-2022-37423
JSON object : View
Products Affected
neo4j
- awesome_procedures_on_cypher
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')