CVE-2018-1000820

Name of the Vulnerable Software and Affected Versions neo4j-contrib neo4j-apoc-procedures versions before commit 45bc09c

Description The issue is related to a XML External Entity (XXE) vulnerability in the XML Parser. This can result in disclosure of confidential data, denial of service, Server-Side Request Forgery (SSRF), and port scanning.

Recommendations For versions before commit 45bc09c, update to a version after commit 45bc09c to resolve the issue. As a temporary workaround, consider restricting the use of the XML Parser to minimize the risk of exploitation.