RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11
Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2024/04/22/3 | Mailing List Third Party Advisory |
| https://hugegraph.apache.org/docs/config/config-authentication/#configure-user-authentication | Product |
| https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9 | Mailing List Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2024/04/22/3 | Mailing List Third Party Advisory |
| https://hugegraph.apache.org/docs/config/config-authentication/#configure-user-authentication | Product |
| https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9 | Mailing List Vendor Advisory |
| https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-apache-hugegraph-server-cve-2024-27348 | Exploit Third Party Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27348 | Third Party Advisory US Government Resource |
Configurations
History
23 Oct 2025, 14:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27348 - Third Party Advisory, US Government Resource |
21 Oct 2025, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Oct 2025, 20:20
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Oct 2025, 19:20
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Feb 2025, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue. |
16 Dec 2024, 20:12
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:oracle:jdk:8:*:*:*:*:*:*:* cpe:2.3:a:oracle:jre:8:*:*:*:*:*:*:* cpe:2.3:a:oracle:jre:11:*:*:*:*:*:*:* |
|
| References | () https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-apache-hugegraph-server-cve-2024-27348 - Exploit, Third Party Advisory |
Information
Published : 2024-04-22 14:15
Updated : 2025-10-23 14:48
NVD link : CVE-2024-27348
Mitre link : CVE-2024-27348
CVE.ORG link : CVE-2024-27348
JSON object : View
Products Affected
apache
- hugegraph
CWE