« Back to list

CVE-2021-42767

Status: ModifiedCritical (9.1)—

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Neo4j — Awesome Procedures

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2021-42767",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-03-01T02:15:07.370",
  "references": [
    {
      "url": "https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://neo4j.com",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://neo4j.com",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de cruce de directorios en los plugins apoc de la base de datos Neo4J Graph antes de la versión 4.4.0.1 permite a los atacantes leer archivos locales y, en ocasiones, crear archivos locales. Esto se ha corregido en las versiones 3.5.17, 4.2.10, 4.3.0.4 y 4.4.0.1"
    }
  ],
  "lastModified": "2026-06-17T04:10:06.673",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:neo4j:awesome_procedures:*:*:*:*:*:neo4j:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04D6D30D-DAC3-4424-8BC1-614D8261BB21",
              "versionEndExcluding": "3.5.0.17"
            },
            {
              "criteria": "cpe:2.3:a:neo4j:awesome_procedures:*:*:*:*:*:neo4j:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4EA2444C-7672-43E5-B95B-0B1F41D7C4B4",
              "versionEndExcluding": "4.2.10",
              "versionStartIncluding": "4.2.0.0"
            },
            {
              "criteria": "cpe:2.3:a:neo4j:awesome_procedures:*:*:*:*:*:neo4j:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74F7C960-D2B5-4E8A-B98B-A4FB52DC4C88",
              "versionEndExcluding": "4.3.0.4",
              "versionStartIncluding": "4.3.0.0"
            },
            {
              "criteria": "cpe:2.3:a:neo4j:awesome_procedures:*:*:*:*:*:neo4j:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61E31177-96CD-47EF-BE4B-7AA0C12F154D",
              "versionEndExcluding": "4.4.0.1",
              "versionStartIncluding": "4.4.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}