CVE-2022-37423: NEO4J Awesome Procedures On Cypher

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.

Affected products

  • NEO4J Awesome Procedures On Cypher: before 4.3.0.7 (fixed in 4.3.0.7); from 4.4.0.0, before 4.4.0.8 (fixed in 4.4.0.8)

Published 2022-08-12. Last modified 2026-06-17.