Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/04/04 2:19 p.m.48 views

GraphQL grant on a property might be cached with different objects

Original message: I found an issue with security grants on on properties in the GraphQL ItemNormalizer: If you use something like ApiPropertysecurity: 'isgranted"PROPERTYREAD", object, property' on a member of an entity, the grant gets cached and is only evaluated once, even if the object in...

7.5CVSS7.1AI score0.00573EPSS
SaveExploits0References8Affected Software2
Rows per page
Query Builder