CVE-2024-27347

Server-Side Request Forgery (SSRF) vulnerability in Apache HugeGraph-Hubble.This issue affects Apache HugeGraph-Hubble: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

• CWE-918

• http://www.openwall.com/lists/oss-security/2024/04/22/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/z0v71148slfkw60hsp35pl7ddjyvg01lMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2024/04/22/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/z0v71148slfkw60hsp35pl7ddjyvg01lMailing List, Vendor Advisory

Published

Apr 22, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27341Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow …7.8
• CVE-2024-27342Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote …7.8
• CVE-2024-27343Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Informat…5.5
• CVE-2024-27344Kofax Power PDF PDF File Parsing Memory Corruption Remote Co…7.8
• CVE-2024-27345Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Informat…3.3
• CVE-2024-27346Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Informat…5.5
• CVE-2024-27348RCE-Remote Command Execution vulnerability in Apache HugeGra…9.8
• CVE-2024-27349Authentication Bypass by Spoofing vulnerability in Apache Hu…9.1
• CVE-2024-2735The Bold Page Builder plugin for WordPress is vulnerable to …5.4
• CVE-2024-27350Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows …5.9
• CVE-2024-27351In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 befo…5.3
• CVE-2024-27353A memory corruption vulnerability in SdHost and SdMmcDevice …7.4