Description
A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1.
Remediation
References
https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m
https://neo4j.com
Related Vulnerabilities
CVE-2023-38507 Vulnerability in npm package @strapi/admin
CVE-2022-29249 Vulnerability in maven package io.github.javaezlib:javaez
CVE-2016-8735 Vulnerability in maven package org.apache.tomcat:tomcat-catalina-jmx-remote
CVE-2015-1835 Vulnerability in npm package cordova-android
CVE-2017-16143 Vulnerability in npm package commentapp.stetsonwood