13 matches found
CVE-2022-35500
CVE-2022-35500 Magento 2 用 Amasty Blog Pro のコメント投稿機能における保存型クロスサイトスクリプティング XSS 説明 Magento 2 用 Amasty Blog Pro 2.10.3 および 2.10.4 プラグインのコメント投稿機能では、GraphQL エンドポイントを介して AmBlogLeaveComment ミューテーションの name パラメータに JavaScript コードを注入することが可能です。この JavaScript コードは、被害者（管理者）が管理パネルからコメントを削除しようとした際に実行されます。...
Gitlab-CVE-2026-19478
CVE-2026-19478 — GitLab GraphQL @glintroduced 指令注入 GitLab CE/EE 中通过 GraphQL 指令实现的未认证远程代码注入 — 仅需一个 HTTP 请求即可删除任意公共项目 这是一个实战渗透测试实验环境，用于复现 CVE-2026-19478——GitLab GraphQL API 中的一个严重（CVSS 9.4）漏洞。@glintroduced 指令允许未认证攻击者在服务器端对象上执行任意 Ruby 方法——包括项目删除、数据外泄和所有权转移——全程无需任何认证。 该实验环境在 Docker 中运行一个真实存在漏洞的 GitLa...
CVE-2026-34884
SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...
EUVD-2026-60572
SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...
CVE-2026-34884
Apache SkyWalking MCP version 0.1.0 is vulnerable to Server-Side Request Forgery (SSRF) and GraphQL expression injection . The SSRF vulnerability specifically occurs through the set skywalking url tool within the MCP Server. To remediate these issues, users are recommended to upgrade to version 0...
CVE-2026-34884 Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...
CVE-2026-34884
SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...
remorses/genql code injection
RISK EVALUATION remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is...
Improper Neutralization of Special Elements in Data Query Logic
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the checkUserPassword process. An attacker can execute arbitrary queries on the backend database by injecting specially crafted input into the password field of a Graph...
CVE-2026-3118 Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub Backstage. The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This...
CVE-2026-3118
The CVE covers CVE-2026-3118 affecting the Orchestrator Plugin in Red Hat Developer Hub (Backstage). The root cause is insufficient input validation in GraphQL query handling, allowing an authenticated user to inject crafted input that disrupts backend query processing and triggers a platform-wid...
CVE-2026-3118 Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub Backstage. The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This...
