Apache HugeGraph-Server <1.5.0 - Authentication Bypass
Apache HugeGraph-Server versions prior to 1.5.0 contain an authentication bypass vulnerability caused by assumed-immutable data. This flaw allows attackers to bypass authentication mechanisms without requiring specific privileges or user interaction. References: https://github.com/advisories/GHSA-f697-gm3h-xrf9 https://github.com/apache/incubator-hugegraph/commit/03b40a52446218c83e98cb43020e0593a744a246 https://lists.apache.org/thread/h2607yv32wgcrywov960jpxhvsmmlf12 http://www.openwall.com/lists/oss-security/2024/12/24/2 https://github.com/J1ezds/Vulnerability-Wiki-page Remediation: Upgrade to Apache HugeGraph-Server version 1.5.0 or later.
10 assets checked · domain, subdomain, ipv4