Threats tagged 'bit-neo4j-2024-34517'

Neo4j versions 5.0.0 through 5.18 contain a vulnerability in the Cypher component where IMMUTABLE privileges are mishandled in certain situations involving attackers with existing admin access. This flaw affects privilege handling but requires the attacker to already have administrative rights. A patch is available to address this issue.