CVE-2022-37423
1 advisory.
Maven/org.neo4j.procedure:apoc CVE-2022-37423: medium, EPSS 1.44%
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
Action: Upgrade org.neo4j.procedure:apoc to 4.3.0.7 (4.3.x) or 4.4.0.8 (4.4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.4.0.0 | 4.4.0.8 | - |
| 0 | 4.3.0.7 | - |
Fixed versions
| 4.4.0.8 | 4.3.0.7 |
Sources
- osv: GHSA-78f9-745f-278p
- https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-78f9-745f-278p
- https://nvd.nist.gov/vuln/detail/CVE-2022-37423
- https://github.com/neo4j-contrib/neo4j-apoc-procedures/pull/3080
- https://github.com/neo4j-contrib/neo4j-apoc-procedures/commit/d2f415c6f703bbc2cda4a753928821ff15d5c620
- https://github.com/neo4j-contrib/neo4j-apoc-procedures/commit/fe9f8c77269f5a742585c1d62324eb70755de510
- https://github.com/neo4j-contrib/neo4j-apoc-procedures
- https://neo4j.com/docs/aura/platform/apoc
CVE-2022-37423 · published · modified · JSON