CVE-2024-34517

תיאור (מקור, אנגלית)

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access.

מדדים

CVSS 3.1

6.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS — סבירות ניצול

1% (אחוזון 000) נכון ל-18/9/2026

CWE

CWE-471

מוצרים מושפעים

neo4j: neo4j

קישורים

• https://neo4j.com/security/cve-2024-34517/ Vendor Advisory
• https://neo4j.com/security/cve-2024-34517/ Vendor Advisory
• https://github.com/advisories/GHSA-p343-9qwp-pqxv Third Party Advisory
• https://github.com/neo4j/neo4j/wiki/Neo4j-5-changelog#cypher Release Notes
• https://trust.neo4j.com Product
• https://github.com/advisories/GHSA-p343-9qwp-pqxv Third Party Advisory
• https://github.com/neo4j/neo4j/wiki/Neo4j-5-changelog#cypher Release Notes
• https://trust.neo4j.com Product