Vulnerabilities > Arangodb > Arangodb > 3.8.3

DATE CVE VULNERABILITY TITLE RISK
2022-02-09 CVE-2021-25939 Server-Side Request Forgery (SSRF) vulnerability in Arangodb
In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL.
network
low complexity
arangodb CWE-918
4.0
4.0
2021-11-16 CVE-2021-25940 Insufficient Session Expiration vulnerability in Arangodb
In ArangoDB, versions v3.7.6 through v3.8.3 are vulnerable to Insufficient Session Expiration.
network
arangodb CWE-613
6.0
6.0