GHSA-2w4h-f44w-968f
Improper Privilege Management in Neo4j Graph Database
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.neo4j:neo4j-kernel | >= 4.2.0, < 4.2.8 | 4.2.8 |
Details
As written in the advisory (Markdown source, shown as plain text).
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 could allow authenticated users to execute commands with elevated privileges.
References
External links from the advisory. They lead to third-party sites.