3 matches found
GHSA-974J-WJXX-WGGJ Incorrect Access Control vulnerability in api-platform/core
API Platform version from 2.2.0 to 2.3.5 contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource can delete any resource. This attack appears to be exploitable via the user must be authorized. This vulnerability...
6.5CVSS6.4AI score0.01024EPSS
SaveExploits0References4
20