{"action":"Upgrade org.neo4j:neo4j to 2.2.0-M01 or later.","affected":[{"fixed":"2.2.0-M01","introduced":"0"}],"component":"org.neo4j:neo4j","cve_ids":["CVE-2013-7259"],"ecosystem":"Maven","epss":0.01253,"exploited":false,"fixed_versions":["2.2.0-M01"],"ghsa_id":"GHSA-x626-q4v7-7xc6","id":"tcs_01M5N9HTE4G9KQRMZ11FZEVSC1","modified_at":"2025-04-14T16:12:07.787603Z","published_at":"2022-05-17T04:38:50Z","references":["https://osv.dev/vulnerability/GHSA-x626-q4v7-7xc6","https://nvd.nist.gov/vuln/detail/CVE-2013-7259","https://github.com/neo4j/neo4j/issues/2826","https://github.com/neo4j/neo4j/commit/40ad76078a25666d8b218772b6491fb443020df9","https://github.com/neo4j/neo4j","https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j","https://web.archive.org/web/20131017043717/http://blog.diniscruz.com/2013/08/neo4j-csrf-payload-to-start-processes.html","http://www.openwall.com/lists/oss-security/2014/01/03/3","http://www.openwall.com/lists/oss-security/2014/01/03/8"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-x626-q4v7-7xc6","url":"https://osv.dev/vulnerability/GHSA-x626-q4v7-7xc6"}],"summary":"Neo4J vulnerable to Cross-Site Request Forgery"}