Lucene search

CVE-2023-27588

🗓️ 14 Mar 2023 18:10:15Reported by [email protected]Type

Hasura open-source product has a path traversal vulnerability in versions 1.3.4, 2.55.1, 2.20.1, and 2.21.0-beta

Reporter	Title	Published	Views	Family All 6
Prion	Path traversal	14 Mar 202318:15	–	prion
OSV	CVE-2023-27588	14 Mar 202318:15	–	osv
Vulnrichment	CVE-2023-27588 Unauthenticated path traversal vulnerability in Hasura GraphQL Engine	14 Mar 202317:23	–	vulnrichment
CVE	CVE-2023-27588	14 Mar 202318:15	–	cve
Cvelist	CVE-2023-27588 Unauthenticated path traversal vulnerability in Hasura GraphQL Engine	14 Mar 202317:23	–	cvelist
Wallarm Lab	Changes in OWASP API Security Top-10 2023RC \| API Security Newsletter	6 Apr 202314:27	–	wallarmlab

Nvd

Node

hasura graphql_engineRange<1.3.4

hasura graphql_engineRange2.0.0–2.11.5

hasura graphql_engineRange2.12.0–2.20.1

Source	Link
github	www.github.com/hasura/graphql-engine/security/advisories/GHSA-c9rw-rw2f-mj4x
github	www.github.com/hasura/graphql-engine/releases/tag/v2.20.1
github	www.github.com/hasura/graphql-engine/releases/tag/v1.3.4
github	www.github.com/hasura/graphql-engine/releases/tag/v2.11.5
github	www.github.com/hasura/graphql-engine/releases/tag/v2.21.0-beta.1
github	www.github.com/hasura/graphql-engine/commit/dda54543ee1ecf647ca5d0971b140c3a7b9f4158

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Mar 2023 18:15Current

7.6High risk

Vulners AI Score7.6

CVSS37.5

EPSS0.00229