Логотип exploitDog
bind:CVE-2025-31481
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-31481

Количество 2

Количество 2

nvd логотип

CVE-2025-31481

10 месяцев назад

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Using the Relay special node type you can bypass the configured security on an operation. This vulnerability is fixed in 4.0.22 and 3.4.17.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-cg3c-245w-728m

10 месяцев назад

GraphQL query operations security can be bypassed

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-31481

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Using the Relay special node type you can bypass the configured security on an operation. This vulnerability is fixed in 4.0.22 and 3.4.17.

CVSS3: 7.5
0%
Низкий
10 месяцев назад
github логотип
GHSA-cg3c-245w-728m

GraphQL query operations security can be bypassed

CVSS3: 7.5
0%
Низкий
10 месяцев назад

Уязвимостей на страницу