Apache HugeGraph-Server Product Security Update Advisory
Overview
An update has been released to address vulnerabilities in the Apache HugeGraph-Server product. Users of affected versions are advised to update to the latest version.
Affected Products
Apache HugeGraph-Server versions: 1.0.0 (inclusive) to 1.3.0 (excluded)
Resolved Vulnerabilities
RCE-Remote Command Execution Vulnerability in Apache HugeGraph-Server (CVE-2024-27348)
Vulnerability Patches
Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest vulnerability patches version.
Apache HugeGraph-Server version 1.3.0
Referenced Sites
[1] CVE-2024-27348 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-27348
[2] CVE-2024-27348: Apache HugeGraph-Server: Command execution in gremlin