Directory Traversal Vulnerability in Neo4J Graph Database's Apoc Plugins

Directory Traversal Vulnerability in Neo4J Graph Database's Apoc Plugins

CVE-2021-42767 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1.

Learn more about our Web Application Penetration Testing UK.