Description
Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.
Remediation
References
https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-78f9-745f-278p
https://neo4j.com/docs/aura/platform/apoc/
Related Vulnerabilities
CVE-2022-45388 Vulnerability in maven package net.praqma:config-rotator
CVE-2020-28448 Vulnerability in npm package multi-ini
CVE-2022-24821 Vulnerability in maven package org.xwiki.platform:xwiki-platform-skin-skinx
CVE-2023-36472 Vulnerability in npm package @strapi/plugin-content-manager
CVE-2020-36185 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind