CVE-2024-43441 — Apache HugeGraph-Server: Fixed JWT Token(Secret)

CVE-2024-43441

Apache HugeGraph-Server: Fixed JWT Token(Secret) PUBLISHED

Description (CNA)

Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache HugeGraph-Server	affected 1.0.0 before 1.5.0

CWE

CWE-302

References

https://lists.apache.org/thread/h2607yv32wgcrywov960jpxhvsmmlf12

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2024/12/24/2

CISA-ADP

No English description supplied.

No references supplied.