Lucene search
+L
VmwareSpring For Graphql1.2.0

1 matches found

CVE
CVE
added 2023/09/20 9:9 a.m.2522 views

CVE-2023-34047

CVE-2023-34047 affects Spring GraphQL: vulnerable batches occur when registering batch loader functions with a DataLoaderOptions instance in versions 1.1.0–1.1.5 and 1.2.0–1.2.2. Root cause: a batch loader may be exposed to the GraphQL context with values from a different session, including secur...

4.3CVSS4.2AI score0.0036EPSS
Save