An issue was discovered in Tigergraph Enterprise 3.7.0. The GSQL query language provides users with the ability to write data to files on a remote TigerGraph server. The locations that a query is allowed to write to are configurable via the GSQL.FileOutputPolicy configuration setting. GSQL queries that contain UDFs can bypass this configuration setting and, as a consequence, can write to any file location to which the administrative user has access.
References
| Link | Resource |
|---|---|
| https://neo4j.com/security/cve-2023-28483/ | Exploit Third Party Advisory |
| https://neo4j.com/security/cve-2023-28483/ | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://neo4j.com/security/cve-2023-28483/ - Exploit, Third Party Advisory |
21 Aug 2023, 17:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://neo4j.com/security/cve-2023-28483/ - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:tigergraph:tigergraph:3.7.0:*:*:*:enterprise:*:*:* |
14 Aug 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-14 19:15
Updated : 2024-11-21 07:55
NVD link : CVE-2023-28483
Mitre link : CVE-2023-28483
CVE.ORG link : CVE-2023-28483
JSON object : View
Products Affected
tigergraph
- tigergraph
CWE