~ / search / GHSA-77x4-55q7-4vmj

GHSA-77x4-55q7-4vmj

Apache HugeGraph-Hubble: SSRF in Hubble connection page

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-27347

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.hugegraph:hugegraph-hubble >= 1.0.0, < 1.3.0 1.3.0

Details

As written in the advisory (Markdown source, shown as plain text).

Server-Side Request Forgery (SSRF) vulnerability in Apache HugeGraph-Hubble. This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.