CVE-2024-27349

CVE-2024-27349: Apache HugeGraph-Server: Bypass whitelist in Auth mode

Vendor Apache Software Foundation

Product Apache HugeGraph-Server

Weakness CWE-290

Published April 22, 2024

Last update August 21, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Key dates

02Disclosure timeline

April 22, 2024 CVE published

August 21, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-27349 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/290.html AskarLabs — CWE-290 write-up Authentication Bypass by Spoofing

Related vulnerabilities

04Related CVE

CVE-2026-24372 WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability CVE-2024-30479 WordPress LionScripts: IP Blocker Lite plugin <= 11.1.1 - Bypass vulnerability CVE-2026-42662 WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability CVE-2026-64875 Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension CVE-2024-37430 WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability