CVE-2023-28480 — n/a / n/a

Description (CNA)

An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to define new User Defined Functions (UDFs) from C/C++ code. To support this functionality TigerGraph allows users to upload custom C/C++ code which is then compiled and installed into the platform. An attacker who has filesystem access on a remote TigerGraph system can alter the behavior of the database against the will of the database administrator; thus effectively bypassing the built in RBAC controls.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://neo4j.com/security/cve-2023-28480/

ADP enrichment

CVE

No English description supplied.

https://neo4j.com/security/cve-2023-28480/

CISA-ADP

No English description supplied.

No references supplied.