cve/2024/CVE-2024-27348.md

### [CVE-2024-27348](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27348)
![](https://img.shields.io/static/v1?label=Product&message=Apache%20HugeGraph-Server&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.0.0%3C%201.3.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=RCE-Remote%20Command%20Execution&color=brighgreen)

### Description

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/0day404/HV-2024-POC
- https://github.com/12442RF/POC
- https://github.com/AboSteam/POPC
- https://github.com/DMW11525708/wiki
- https://github.com/J1ezds/Vulnerability-Wiki-page
- https://github.com/Lern0n/Lernon-POC
- https://github.com/Linxloop/fork_POC
- https://github.com/Ostorlab/KEV
- https://github.com/QuocKon/Network-Penetration-Lab
- https://github.com/Threekiii/Awesome-POC
- https://github.com/WhosGa/MyWiki
- https://github.com/Yuan08o/pocs
- https://github.com/Zeyad-Azima/CVE-2024-27348
- https://github.com/admin772/POC
- https://github.com/adminlove520/pocWiki
- https://github.com/adysec/POC
- https://github.com/apiverve/news-API
- https://github.com/cisp-pte/POC-20241008-sec-fork
- https://github.com/eeeeeeeeee-code/POC
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/g1san/Agents-for-Vulnerable-Dockers-and-related-Benchmarks
- https://github.com/greenberglinken/2023hvv_1
- https://github.com/iemotion/POC
- https://github.com/ismailmazumder/SL7CVELabsBuilder
- https://github.com/jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE
- https://github.com/kljunowsky/CVE-2024-27348
- https://github.com/laoa1573/wy876
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/oLy0/Vulnerability
- https://github.com/p0et08/CVE-2024-27348
- https://github.com/securelayer7/CVE-Analysis
- https://github.com/securelayer7/Research
- https://github.com/wjlin0/poc-doc
- https://github.com/wy876/POC
- https://github.com/wy876/wiki
- https://github.com/zhanpengliu-tencent/medium-cve
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`### [CVE-2024-27348](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27348)`
			`![](https://img.shields.io/static/v1?label=Product&message=Apache%20HugeGraph-Server&color=blue)`
			`![](https://img.shields.io/static/v1?label=Version&message=1.0.0%3C%201.3.0%20&color=brighgreen)`
			`![](https://img.shields.io/static/v1?label=Vulnerability&message=RCE-Remote%20Command%20Execution&color=brighgreen)`

			`### Description`

			`RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.`

			`### POC`

			`#### Reference`
			`No PoCs from references.`

			`#### Github`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/0day404/HV-2024-POC`
			`- https://github.com/12442RF/POC`
			`- https://github.com/AboSteam/POPC`
			`- https://github.com/DMW11525708/wiki`
			`- https://github.com/J1ezds/Vulnerability-Wiki-page`
			`- https://github.com/Lern0n/Lernon-POC`
			`- https://github.com/Linxloop/fork_POC`
Update CVE sources 2024-06-07 04:52 2024-06-07 04:52:01 +00:00			`- https://github.com/Ostorlab/KEV`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/QuocKon/Network-Penetration-Lab`
			`- https://github.com/Threekiii/Awesome-POC`
			`- https://github.com/WhosGa/MyWiki`
			`- https://github.com/Yuan08o/pocs`
Update CVE sources 2024-06-08 09:32 2024-06-08 09:32:58 +00:00			`- https://github.com/Zeyad-Azima/CVE-2024-27348`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/admin772/POC`
			`- https://github.com/adminlove520/pocWiki`
			`- https://github.com/adysec/POC`
Update CVE sources 2024-08-17 18:41 2024-08-17 18:41:15 +00:00			`- https://github.com/apiverve/news-API`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/cisp-pte/POC-20241008-sec-fork`
			`- https://github.com/eeeeeeeeee-code/POC`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`- https://github.com/fkie-cad/nvd-json-data-feeds`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/g1san/Agents-for-Vulnerable-Dockers-and-related-Benchmarks`
			`- https://github.com/greenberglinken/2023hvv_1`
			`- https://github.com/iemotion/POC`
			`- https://github.com/ismailmazumder/SL7CVELabsBuilder`
Update CVE sources 2024-08-10 19:04 2024-08-10 19:04:30 +00:00			`- https://github.com/jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE`
Update CVE sources 2024-06-08 09:32 2024-06-08 09:32:58 +00:00			`- https://github.com/kljunowsky/CVE-2024-27348`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/laoa1573/wy876`
Update CVE sources 2024-06-07 04:52 2024-06-07 04:52:01 +00:00			`- https://github.com/nomi-sec/PoC-in-GitHub`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/oLy0/Vulnerability`
			`- https://github.com/p0et08/CVE-2024-27348`
Update CVE sources 2024-08-17 18:41 2024-08-17 18:41:15 +00:00			`- https://github.com/securelayer7/CVE-Analysis`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/securelayer7/Research`
Update CVE sources 2024-06-23 04:42 2024-06-23 04:42:52 +00:00			`- https://github.com/wjlin0/poc-doc`
Update CVE sources 2024-06-08 09:32 2024-06-08 09:32:58 +00:00			`- https://github.com/wy876/POC`
			`- https://github.com/wy876/wiki`
Update CVE sources 2025-09-29 16:08 2025-09-29 16:08:36 +00:00			`- https://github.com/zhanpengliu-tencent/medium-cve`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00