[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpkb7CQ1moc9Ud82iG2FCwAwl-iIcdFBUdmWr3DF8xMU":3,"g5a-risk:CVE-2024-27348":133},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":46,"references":47,"referencesCount":79,"weaknesses":80,"weaknessesCount":46,"isActivelyExploited":4,"cisaInfo":89,"otxData":27,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":128,"notableEvents":129},"CVE-2024-27348","What is CVE-2024-27348?","RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11\n\nUsers are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.","RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 U...","2024-04-22T14:15:07.42","2026-06-17T07:19:42.14",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":36},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],[],0.9921,[37,37,37,37,37,37,37],"Critical",[41],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"apache","hugegraph","*","cpe:2.3:a:apache:hugegraph:*:*:*:*:*:*:*:*",1,[48,54,59,63,65,67,69,74],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F04\u002F22\u002F3","Openwall",[52,53],"Mailing List","Third Party Advisory",{"url":55,"source":56,"tags":57},"https:\u002F\u002Fhugegraph.apache.org\u002Fdocs\u002Fconfig\u002Fconfig-authentication\u002F#configure-user-authentication","Apache",[58],"Product",{"url":60,"source":56,"tags":61},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fnx6g6htyhpgtzsocybm242781o8w5kq9",[52,62],"Vendor Advisory",{"url":49,"source":50,"tags":64},[52,53],{"url":55,"source":56,"tags":66},[58],{"url":60,"source":56,"tags":68},[52,62],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fremote-code-execution-vulnerability-in-apache-hugegraph-server-cve-2024-27348","Vicarius",[73,53],"Exploit",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27348","CISA",[53,78],"US Government Resource",8,[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",{"shortDescription":90,"requiredAction":90,"vulnerabilityName":90,"dateAdded":27},"",[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2024-27348? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-27348, a critical severity cyber security vulnerability from 2024. High exploit probability (99.2%). RCE-Remote Command Ex...","CVE-2024-27348, CVE-2024-27348 vulnerability, CVE-2024-27348 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, apache security, hugegraph vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-27348",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-27348","Cybersecurity","CVE-2024-27348, CVE-2024-27348 vulnerability, CVE-2024-27348 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":27,"Negate":27,"Nodes":119},[120],{"Operator":121,"Negate":122,"CPEMatch":123},"OR",false,[124],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":126,"VersionEndExcluding":127,"VersionEndIncluding":27},"5DDD7AA3-3439-48D7-B24B-1D9D31B284BD","1.0.0","1.3.0",[],[],{"lastModified":11,"cacheTime":131,"version":132},1793196401548,"2.0",{"score":134,"band":39,"action":135,"scoredAt":136},90,"Emergency patch","2026-10-28T07:01:32.436629+00:00"]