CVE-2024-27349

moderate-risk

Published 2024-04-22

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Do I need to act?

0.44% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.1/10 Critical

NETWORK / LOW complexity

Affected Products (1)

Hugegraph

Affected Vendors

Apache

References (4)

Mailing List http://www.openwall.com/lists/oss-security/2024/04/22/4

Mailing List https://lists.apache.org/thread/dz9n9lndqfsf64t72o73r7sttrc6ocsd

Mailing List http://www.openwall.com/lists/oss-security/2024/04/22/4

Mailing List https://lists.apache.org/thread/dz9n9lndqfsf64t72o73r7sttrc6ocsd

/ 100

moderate-risk

Severity 31/34 · Critical

Exploitability 2/34 · Minimal

Exposure 5/34 · Minimal