{"id":"CVE-2022-37423","aliases":["GHSA-78f9-745f-278p"],"url":"https://o3.security/vulnerability/CVE-2022-37423","summary":"Neo4j Graph apoc plugins Partial Path Traversal Vulnerability","details":"Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.","published":"2022-08-12T12:16:36Z","modified":"2026-07-22T02:07:54.651766Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Maven","name":"org.neo4j.procedure:apoc","fixedVersion":"4.4.0.8"},{"ecosystem":"Maven","name":"org.neo4j.procedure:apoc","fixedVersion":"4.3.0.7"}],"fix":null,"references":[{"type":"WEB","url":"https://neo4j.com/docs/aura/platform/apoc/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37423.json"},{"type":"ADVISORY","url":"https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-78f9-745f-278p"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37423"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-22T02:07:54.651766Z"}}