Description
Apache HugeGraph-Server 存在 RCE（远程命令执行）漏洞。此问题影响 Apache HugeGraph-Server：Java8 和Java11 版本中 1.0.0 至 1.3.0 之前的版本。建议用户升级到 Java11 的 1.3.0 版本并启用身份验证系统
Apache HugeGraph存在代码注入漏洞(CVE-2024–27348)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-27348
https://www.exploit-db.com/exploits/52149
https://github.com/jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE
https://www.uptycs.com/blog/threat-research-report-team/apache-hugegraph-vulnerability
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-27348-remote-code-execution-vulnerability-in-apache-hugegraph-server
https://www.rapid7.com/db/vulnerabilities/apache-hugegraph-cve-2024-27348/
https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-apache-hugegraph-server-cve-2024-27348
https://hugegraph.apache.org/docs/guides/security/
https://www.openwall.com/lists/oss-security/2024/04/22/3
https://thehackernews.com/2024/07/critical-apache-hugegraph-vulnerability.html
https://www.securityweek.com/apache-hugegraph-vulnerability-exploited-in-wild/