Lucene search
GitHub Advisory DatabaseGHSA-P4QX-6W5P-4RJ2HistoryMar 27, 2023 - 3:30 a.m.
GraphQL Java vulnerable to stack consumption
2023-03-2703:30:16
CWE-770
GitHub Advisory Database
github.com
14
0.001 Low
EPSS
Percentile
40.7%
In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44-80e3135.
References
github.com/advisories/GHSA-p4qx-6w5p-4rj2
github.com/graphql-java/graphql-java/pull/3112
github.com/graphql-java/graphql-java/releases/tag/v17.5
github.com/graphql-java/graphql-java/releases/tag/v18.4
github.com/graphql-java/graphql-java/releases/tag/v19.4
github.com/graphql-java/graphql-java/releases/tag/v20.1
nvd.nist.gov/vuln/detail/CVE-2023-28867
Related
ibm
ibm
Security Bulletin: CVE-2023-28867 may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Standard
2023-07-14 11:54:08
prion
prion
Design/Logic Flaw
2023-03-27 01:15:00
cvelist
cvelist
CVE-2023-28867
2023-03-27 00:00:00
veracode
veracode
Denial Of Services (DoS)
2023-03-31 04:30:33
cve
cve
CVE-2023-28867
2023-03-27 01:15:07
osv
osv
CVE-2023-28867
2023-03-27 01:15:07
GraphQL Java vulnerable to stack consumption
2023-03-27 03:30:16
redhatcve
redhatcve
CVE-2023-28867
2023-03-27 07:13:09
redhat
redhat