p0et08/cve-2024-27348This is a repository for Apache HugeGraph Remote Code Execution vulnerability(CVE-2024-27348))
This is a repository for Apache HugeGraph Remote Code Execution vulnerability(CVE-2024-27348))
docker pull hugegraph/hugegraph:1.0.0
docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0
services:
web:
image: vulhub/hugegraph:1.2.0
ports:
- "8080:8080"
- "5005:5005"
### docker compose up -d
### visit：http://your_ip:8080
python .\CVE-2024-27348.py -t http://192.168.41.163:8080 -c "id"
For all you can see it
https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-apache-hugegraph-server-cve-2024-27348