Lucene search
+L

1006 matches found

OSV
OSV
•added 2025/11/06 8:42 p.m.•13 views

CVE-2025-64173 Apollo Router Core: Access Control Bypass on Polymorphic Types

Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions 1.61.11 below, as well as 2.0.0-alpha.0 through 2.8.1-rc.0, a vulnerability allowed for unauthenticated queries to access data that required additional access...

7.5CVSS6.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/11/06 8:42 p.m.•34 views

CVE-2025-64173

CVE-2025-64173 affects Apollo Router Core (Rust) in versions 1.61.11 and earlier and 2.0.0-alpha.0 through 2.8.1-rc.0. The vulnerability stems from incorrect handling of access control directives on interface types/fields and their implementing object types/fields, causing unauthenticated queries...

7.5CVSS5.8AI score0.00318EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/11/06 8:42 p.m.•9 views

CVE-2025-64173 Apollo Router Core: Access Control Bypass on Polymorphic Types

Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions 1.61.11 below, as well as 2.0.0-alpha.0 through 2.8.1-rc.0, a vulnerability allowed for unauthenticated queries to access data that required additional access...

7.5CVSS6.5AI score0.00318EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/11/06 3:47 p.m.•27 views

Apollo Router Affected by an Access Control Bypass on Polymorphic Types

Summary A vulnerability in Apollo Router allowed for unauthenticated queries to access data that required additional access controls. Router incorrectly handled access control directives on interface types/fields and their implementing object types/fields, applying them to interface types/fields...

7.5CVSS6.9AI score0.00318EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2025/11/06 3:47 p.m.•13 views

GHSA-X33C-7C2V-MRJ9 Apollo Router Affected by an Access Control Bypass on Polymorphic Types

Summary A vulnerability in Apollo Router allowed for unauthenticated queries to access data that required additional access controls. Router incorrectly handled access control directives on interface types/fields and their implementing object types/fields, applying them to interface types/fields...

7.5CVSS6.9AI score0.00318EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/11/06 3:47 p.m.•15 views

EUVD-2025-38036

Apollo Router Affected by an Access Control Bypass on Polymorphic Types...

7.5CVSS6.3AI score0.00318EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•4 views

CVE-2025-64173: Authentication Bypass Using an Alternate Path or Channel

Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions 1.61.11 below, as well as 2.0.0-alpha.0 through 2.8.1-rc.0, a vulnerability allowed for unauthenticated queries to access data that required additional access...

7.5CVSS5.8AI score0.00318EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•28 views

PT-2025-45376

Name of the Vulnerable Software and Affected Versions Apollo Router Core versions 1.61.11 and earlier Apollo Router Core versions 2.0.0-alpha.0 through 2.8.1-rc.0 Description Apollo Router Core, a configurable graph router written in Rust for Apollo Federation 2, had an access control issue. The...

7.5CVSS6.8AI score0.00318EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-0198

Malware in sbrugna...

9.8CVSS9.1AI score0.07524EPSS
SaveExploits0References48
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-0182

Malware in sbrugna...

9.8CVSS9.1AI score0.10599EPSS
SaveExploits0References59
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2019-0634

Malware in sbrugna...

7.5CVSS8.3AI score0.10564EPSS
SaveExploits0References54
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-2055

Malware in sbrugna...

6.5CVSS6.5AI score0.01658EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-0483

Malware in sbrugna...

9.8CVSS7.9AI score0.04628EPSS
SaveExploits0References42
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-0181

Malware in sbrugna...

10CVSS9.1AI score0.10458EPSS
SaveExploits0References43
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2019-0750

Malware in sbrugna...

9.8CVSS8.6AI score0.05373EPSS
SaveExploits0References40
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2020-0440

Malware in sbrugna...

9.8CVSS7.6AI score0.04091EPSS
SaveExploits0References25
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-0186

Malware in sbrugna...

9.8CVSS9.1AI score0.10599EPSS
SaveExploits0References56
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-0658

Malware in sbrugna...

9.8CVSS7.8AI score0.04958EPSS
SaveExploits0References62
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-0420

Malware in sbrugna...

9.8CVSS7.6AI score0.05622EPSS
SaveExploits0References25
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-0191

Malware in sbrugna...

9.8CVSS9.1AI score0.10599EPSS
SaveExploits0References56
Rows per page
Query Builder