Описание
GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions.
Ссылки
EPSS
Процентиль: 95%
0.1753
Средний
5.3 Medium
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 7.5
redhat
больше 1 года назад
GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions.
CVSS3: 7.5
github
больше 1 года назад
GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service
EPSS
Процентиль: 95%
0.1753
Средний
5.3 Medium
CVSS3