CVE-2022-41876

🗓️ 10 Nov 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 104 Views🌐 WEB

ezplatform-graphql GraphQL server insecure sensitive information storag

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Ibexa Ezplatform-Graphql	21 Mar 202317:05	–	githubexploit
CNNVD	Ibexa GraphQL Bundle 安全漏洞	10 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-41876 ezplatform-graphql GraphQL queries can expose password hashes	10 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-7309	3 Oct 202520:07	–	euvd
Github Security Blog	ezplatform-graphql GraphQL queries can expose password hashes	10 Nov 202221:46	–	github
NVD	CVE-2022-41876	10 Nov 202221:15	–	nvd
OSV	CVE-2022-41876 ezplatform-graphql GraphQL queries can expose password hashes	10 Nov 202200:00	–	osv
OSV	GHSA-C7PC-PGF6-MFH5 ezplatform-graphql GraphQL queries can expose password hashes	10 Nov 202221:46	–	osv
Prion	Design/Logic Flaw	10 Nov 202221:15	–	prion
Positive Technologies	PT-2022-26109 · Ez Systems · Ezplatform-Graphql	10 Nov 202200:00	–	ptsecurity

NVD

Vulners

Node

ibexa ezplatform-graphqlRange1.0.0–1.0.13

ibexa ezplatform-graphqlRange2.0.0–2.3.12

ibexa ezplatform-graphqlMatch2.0.0beta1

[
  {
    "vendor": "ezsystems",
    "product": "ezplatform-graphql",
    "versions": [
      {
        "version": "< 1.0.13",
        "status": "affected"
      },
      {
        "version": ">= v2.0.0-beta1, < 2.3.12",
        "status": "affected"
      }
    ]
  }
]