CVE-2025-55817

Tipo di Vulnerabilità Cross Site Scripting XSS Componente Influenzato Le Impostazioni di Connessione di Nitro GraphQL di Chillicream contengono 3 diverse posizioni di input vulnerabili a Cross Site Scripting XSS. Parametri vulnerabili : SDL Schema Endpoint, Subscription Endpoint, SSE Subscription...

GHSA-QR3M-XW4C-JQW3 ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents

Impact Hot Chocolate's Utf8GraphQLParser is a recursive descent parser with no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types can trigger a StackOverflowException on payloads as small as 40 KB. Because...

Exploit for CVE-2025-55817

This is a PoC exploit for CVE-2025-55817, a Stored Cross Site Sc...