Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4g98-g8wp-gw9f

Опубликовано: 11 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.1

Описание

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint).  We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint).  We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.

EPSS

Процентиль: 19%
0.00061
Низкий

2.1 Low

CVSS4

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.2
redhat
около 1 месяца назад

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint).  We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.

nvd
около 1 месяца назад

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint).  We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.

EPSS

Процентиль: 19%
0.00061
Низкий

2.1 Low

CVSS4

Дефекты

CWE-863