{"action":"Upgrade org.neo4j.procedure:apoc to 3.4.0.4 or later.","affected":[{"fixed":"3.4.0.4","introduced":"0"}],"component":"org.neo4j.procedure:apoc","cve_ids":["CVE-2018-1000820"],"ecosystem":"Maven","epss":0.01873,"exploited":false,"fixed_versions":["3.4.0.4"],"ghsa_id":"GHSA-r2pp-x4mm-4999","id":"tcs_01M5N9APSETK0HJSDZHECFR4W2","modified_at":"2024-02-16T08:04:11.271299Z","published_at":"2018-12-20T22:02:02Z","references":["https://osv.dev/vulnerability/GHSA-r2pp-x4mm-4999","https://nvd.nist.gov/vuln/detail/CVE-2018-1000820","https://github.com/neo4j-contrib/neo4j-apoc-procedures/issues/931","https://0dd.zone/2018/10/27/neo4f-apoc-procedures-XXE"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-r2pp-x4mm-4999","url":"https://osv.dev/vulnerability/GHSA-r2pp-x4mm-4999"}],"summary":"XML External Entity (XXE) vulnerability in neo4j.procedure:apoc"}