graphql-cop

GraphQL Cop - Utility di Audit di Sicurezza per GraphQL Informazioni GraphQL Cop è un piccolo utility Python per eseguire test di sicurezza comuni contro API GraphQL. GraphQL Cop è perfetto per eseguire controlli CI/CD in GraphQL. È leggero e copre problemi di sicurezza interessanti in GraphQL...

batchql

BatchQL BatchQL ist ein GraphQL-Sicherheitsaudit-Skript mit Fokus auf die Durchführung von Batch-GraphQL-Abfragen und -Mutationen. Dieses Skript ist nicht komplex, und wir freuen uns über Verbesserungen. Bei der Erkundung des Problembereichs von GraphQL-Batching-Angriffen stellten wir fest, dass ...

CVE-2017-15063

There are CSRF vulnerabilities in Subrion CMS 4.1.x through 4.1.5, and before 4.2.0, because of a logic error. Although there is functionality to detect CSRF, it is called too late in the ia.core.php code, allowing for example an attack against the query parameter to panel/database...

Cross-site Request Forgery (CSRF)

facebook-sdk is vulnerable to cross-site request forgery CSRF. It does not support the state property in auth urls for CSRF detection, allowing CSRF attacks based on state mutation...