Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/04 2:19 p.m.69 views

GHSA-428Q-Q3VV-3FQ3 GraphQL grant on a property might be cached with different objects

Original message: I found an issue with security grants on on properties in the GraphQL ItemNormalizer: If you use something like ApiPropertysecurity: 'isgranted"PROPERTYREAD", object, property' on a member of an entity, the grant gets cached and is only evaluated once, even if the object in...

7.5CVSS7.1AI score0.00573EPSS
SaveExploits0References8
Rows per page
Query Builder