{"uuid": "c82918ff-08db-4b82-8a36-fb13f60a7f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-27348", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_hugegraph_gremlin_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"6right\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits CVE-2024-27348 which is a Remote Code Execution (RCE) vulnerability that exists in\\n          Apache HugeGraph Server in versions before 1.3.0. An attacker can bypass the sandbox restrictions and achieve\\n          RCE through Gremlin, resulting in complete control over the server\", \"disclosure_date\": \"2024-04-22\", \"fullname\": \"exploit/linux/http/apache_hugegraph_gremlin_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Apache HugeGraph Gremlin RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/apache_hugegraph_gremlin_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/apache_hugegraph_gremlin_rce\", \"references\": [\"URL-https://blog.securelayer7.net/remote-code-execution-in-apache-hugegraph/\", \"CVE-2024-27348\", \"EDB-52149\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:21.591584Z"}