What’s Vulnerable › Vulnerabilities

CVE-2023-22950

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-04-13 · updated 2026-06-17
• Weakness: CWE-669

Description

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any user with designer permissions, can read sensitive data from arbitrary locations.

Affected products

• Tigergraph: from 3.0 through 3.7.0

References

• https://dev.tigergraph.com/forum/c/tg-community/announcements/35
• https://neo4j.com/security/cve-2023-22950/
• https://dev.tigergraph.com/forum/c/tg-community/announcements/35
• https://neo4j.com/security/cve-2023-22950/

Get alerted when CVE-2023-22950 or the next vulnerability affects your stack