CVE-2024-27347
Assigner: apache
Published: 2024-04-22T14:07:37.300Z
State: PUBLISHED
affected: collectionURL: https://repo.maven.apache.org/maven2
defaultStatus: unaffected
packageName: org.apache.hugegraph:hubble-be
product: Apache HugeGraph-Hubble
vendor: Apache Software Foundation
versions: lessThan: 1.3.0
status: affected
version: 1.0.0
versionType: maven
credits: type: reporter
value: 6right of moresec
descriptions: supportingMedia: base64: no
type: text/html
value: Server-Side Request Forgery (SSRF) vulnerability in Apache HugeGraph-Hubble.<p>This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0.</p><p>Users are recommended to upgrade to version 1.3.0, which fixes the issue.</p>
value: Server-Side Request Forgery (SSRF) vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.


metrics: other: content: text: moderate
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
type: CWE
source: discovery: EXTERNAL
title: Apache HugeGraph-Hubble: SSRF in Hubble connection page
x_generator: engine: Vulnogram 0.1.0-dev