Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.neo4j.procedure:apoc

4 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high
Registry
Maven Central

Advisories 4

  • neo4j-apoc-procedures is vulnerable to path traversal

    Affected: fixed in 4.3.0.12; from 4.4.0.0, fixed in 4.4.0.12.

  • Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via…

    Affected: from 4.4.0.0, fixed in 4.4.0.8; fixed in 4.3.0.7.

  • A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and…

    Affected: fixed in 3.5.17; from 4.2.0, fixed in 4.2.10; from 4.3.0.0, fixed in 4.3.0.4; from 4.4.0.0, fixed in 4.4.0.1.

  • neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that…

    Affected: fixed in 3.4.0.4.