CVE-2022-37423
- Source
- https://cve.org/CVERecord?id=CVE-2022-37423
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37423.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-37423
- Aliases
- Published
- 2022-08-12T12:16:36Z
- Modified
- 2026-07-15T02:06:04.574167886Z
- Summary
- [none]
- Details
-
Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37423.json", "cna_assigner": "mitre" }- References
Affected packages
Git / github.com/neo4j-contrib/neo4j-apoc-procedures
Affected ranges
- Type
- GIT
- Repo
- https://github.com/neo4j-contrib/neo4j-apoc-procedures
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixed
- Database specific
{ "cpe": "cpe:2.3:a:neo4j:awesome_procedures_on_cypher:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0" }, { "fixed": "4.3.0.7" }, { "introduced": "4.4.0.0" }, { "fixed": "4.4.0.8" } ], "source": "CPE_RANGE" }
Affected versions
1.*
1.0.0
1.0.0-RC1
1.1.0
3.*
3.0.4.1
3.1.0.1
3.1.0.2
3.1.0.3
3.1.0.4
3.1.2.5
3.1.3.6
3.2.0.3
3.2.0.4
3.3.0.1
3.3.0.2
3.4.0.1
3.4.0.2
3.4.0.3
3.5.0.0
3.5.0.1
3.5.0.2
3.5.0.3
3.5.0.4
4.*
4.0.0-rc01
4.0.0.0
4.0.0.1
4.0.0.2
4.0.0.3
4.0.0.4
4.0.0.5
4.1.0-rc01
4.1.0.0
4.2.0-rc01
4.3.0-rc01
4.3.0-rc03
4.3.0-rc2
4.3.0.0
4.3.0.1
4.3.0.2
4.3.0.3
4.3.0.4
4.3.0.5
4.3.0.6
4.4.0.0
4.4.0.1
4.4.0.2
4.4.0.3
4.4.0.4
4.4.0.5
4.4.0.6
4.4.0.7