Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:apache:hugegraph:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Apache HugeGraph-Server: Remote Code Execution via Gremlin Query Injection (CVE-2024-27348)

CVE-2024-27348 is a critical RCE vulnerability in Apache HugeGraph-Server (<= 3.7.1) that allows attackers to execute arbitrary Java code via the /gremlin endpoint, facilitating the deployment of web shells.

HugeGraph-Server remote-code-execution hugegraph gremlin apache
1r 2t 1c