PT-2022-11681 · Neo4J · Neo4J Graph Database

Nicolai Grødum · Published 2022-02-01 · Updated 2022-10-04 · CVE-2021-42767

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Neo4J Graph database versions 4.0.0 through 4.3.6 Neo4J Graph database versions prior to 3.5.17 Neo4J Graph database versions prior to 4.2.10 Neo4J Graph database versions prior to 4.3.0.4 Neo4J Graph database versions prior to 4.4.0.1

Description A directory traversal vulnerability in the Apoc plugins in Neo4J Graph database allows attackers to read local files, and sometimes create local files. The attacker can retrieve and download files from outside the configured directory on the affected server.

Recommendations For Neo4J Graph database version 3.5, update to version 3.5.17 or later. For Neo4J Graph database version 4.2, update to version 4.2.10 or later. For Neo4J Graph database version 4.3, update to version 4.3.0.4 or later. For Neo4J Graph database version 4.4, update to version 4.4.0.1 or later. As a temporary workaround, consider controlling the allowlist of the functions that can be used in your system by configuring the dbms.security.procedures.allowlist setting.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-42767

GHSA-4MPJ-488R-VH6M

Affected Products

Neo4J Graph Database

References · 7

• 🔥 https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-42767 · Security Note
• https://osv.dev/vulnerability/GHSA-4mpj-488r-vh6m · Vendor Advisory
• https://neo4j.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42767 · Vendor Advisory
• https://t.me/cvenotify/27521 · Telegram Post
• https://t.me/cibsecurity/38248 · Telegram Post