CVE-2021-42767

—

CVSS 3.1

9.1 critical

EPSS

2%p73

Published

Mar 1, 2022 (Mar 1, 2022)

Modified

Jun 17, 2026

Description

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1.

Vendors: neo4j
Products: awesome procedures
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.