Lucene search
+L

3 matches found

Kitploit
Kitploit
added 2026/09/17 12:22 p.m.6 views

CVE-2025-55817

漏洞类型 跨站脚本(XSS) 受影响组件 Chillicream 的 Nitro GraphQL 连接设置中包含3个不同的输入位置,容易遭受跨站脚本攻击(XSS)。易受攻击的参数:SDL Schema Endpoint、Subscription Endpoint、SSE Subscription Endpoint 攻击类型 远程 影响-信息泄露 是 攻击向量 3个输入字段容易受到XSS负载的攻击: 供应商已确认 是 发现者 Brian Lowe - KirkpatrickPrice - 2025年6月23日 参考 https://chillicream.com 产品供应商...

5.7AI score
SaveExploits1
OSV
OSV
added 2026/04/16 9:09 p.m.20 views

GHSA-QR3M-XW4C-JQW3 ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents

Impact Hot Chocolate's Utf8GraphQLParser is a recursive descent parser with no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types can trigger a StackOverflowException on payloads as small as 40 KB. Because...

9.1CVSS5.7AI score0.00902EPSS
SaveExploits0References14
GithubExploit
GithubExploit
added 2025/09/26 4:38 p.m.690 views

Exploit for CVE-2025-55817

This is a PoC exploit for CVE-2025-55817, a Stored Cross Site Sc...

5.7AI score
SaveExploits1
Rows per page
Query Builder