Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43367
HistorySep 25, 2023 - 8:52 a.m.

Information Disclosure

2023-09-2508:52:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
vulnerability
information disclosure
spring-graphql
dataloaderoptions
defaultbatchloaderregistry

0.001 Low

EPSS

Percentile

26.8%

org.springframework.graphql:spring-graphql is vulnerable to Information Disclosure. The vulnerability is due to an issue where an application provides a DataLoaderOptions instance when registering batch loader functions through the DefaultBatchLoaderRegistry method leading to information disclosure in the GraphQL context.

0.001 Low

EPSS

Percentile

26.8%

Related for VERACODE:43367