neo4j/neo4j · Security
Neo4j Cypher component mishandles IMMUTABLE privileges
- GHSA ID
- GHSA-p343-9qwp-pqxv
- CVE ID
- CVE-2024-34517
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- CVSS v3
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Description
The Cypher component in Neo4j between v.5.0.0 and v.5.19.0 mishandles IMMUTABLE.
CWEs
- CWE-269 · Improper Privilege Management
- CWE-471 · Modification of Assumed-Immutable Data (MAID)