Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/09/28 4:57 p.m.•9 views

CVE-2024-40094

CVE-2024-40094 ENF ExecutableNormalizedFields Exploit de Denegación de Servicio Este script explota la vulnerabilidad CVE-2024-40094 en graphql-java desencadenando una denegación de servicio basada en ExecutableNormalizedFields ENF. Construye una consulta de introspección GraphQL manipulada con...

7AI score0.00943EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/01/28 10:08 p.m.•21 views

Security Bulletin: IBM PowerVM Novalink is vulnerable because GraphQL Java (aka graphql-java) is vulnerable to a denial of service, caused by the failure to properly consider ExecutableNormalizedFields. (CVE-2024-40094)

Summary IBM PowerVM Novalink is vulnerable because GraphQL Java aka graphql-java is vulnerable to a denial of service, caused by the failure to properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service. By using introspection queries, a remote attacker could exploi...

5.3CVSS7.1AI score0.00943EPSS
SaveExploits2Affected Software1
GithubExploit
GithubExploit
•added 2025/01/17 8:09 a.m.•338 views

Exploit for CVE-2024-40094

CVE-2024-40094 ENF ExecutableNormalizedFields Denial of Serv...

5.3CVSS7.3AI score0.00943EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2024/09/27 8:40 a.m.•33 views

CVE-2024-40094

A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service DoS attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields ENFs, which are not adequately considered duri...

7.5CVSS7AI score0.00943EPSS
SaveExploits2References9
Github Security Blog
Github Security Blog
•added 2024/07/30 9:31 a.m.•63 views

GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

6.9AI score0.00943EPSS
SaveExploits2References11Affected Software1
NVD
NVD
•added 2024/07/30 7:15 a.m.•36 views

CVE-2024-40094

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

5.3CVSS0.00943EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•1 views

CVE-2024-40094: Undefined Security Weakness

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

5.3CVSS6.5AI score0.00943EPSS
SaveExploits2References1
Rows per page
Query Builder