CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-42767

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.9%

CVSS Severity

CVSS v3 Score 9.1

CVSS v2 Score 6.4

References

https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m
https://neo4j.com
https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m
https://neo4j.com

Products affected by CVE-2021-42767

Neo4j » Awesome Procedures » Version: N/A

cpe:2.3:a:neo4j:awesome_procedures:-
Neo4j » Awesome Procedures » Version: 4.2.0.0

cpe:2.3:a:neo4j:awesome_procedures:4.2.0.0
Neo4j » Awesome Procedures » Version: 4.3.0.0

cpe:2.3:a:neo4j:awesome_procedures:4.3.0.0
Neo4j » Awesome Procedures » Version: 4.4.0.0

cpe:2.3:a:neo4j:awesome_procedures:4.4.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42767

Products

Pricing

Contact Us