Variable Reuse In Cached Queries

🗓️ 26 Feb 2025 05:47:49Reported by Veracode Vulnerability DatabaseType

Vulnerability in cached queries allows variable reuse, risking unauthorized access with fixed tokens.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-27097	20 Feb 202521:17	–	circl
CNNVD	graphql-mesh 资源管理错误漏洞	20 Feb 202500:00	–	cnnvd
CVE	CVE-2025-27097	20 Feb 202520:15	–	cve
Cvelist	CVE-2025-27097 Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	20 Feb 202520:15	–	cvelist
EUVD	EUVD-2023-2806	3 Oct 202520:07	–	euvd
Github Security Blog	Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	10 Oct 202321:29	–	github
NVD	CVE-2025-27097	20 Feb 202521:15	–	nvd
OSV	CVE-2025-27097 Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	20 Feb 202520:15	–	osv
OSV	GHSA-RR4X-CRHF-8886 Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	10 Oct 202321:29	–	osv
Positive Technologies	PT-2023-36348 · Unknown · Graphql Mesh	10 Oct 202300:00	–	ptsecurity

Vulners

Node

pivotal_software @graphql-mesh/runtimeRange0.96.5-alpha-20230912172539-074a55675–0.96.9-alpha-20231009135650-d77450c75js

Source	Link
github	www.github.com/ardatan/graphql-mesh/releases/tag/release-1696859949678
github	www.github.com/ardatan/graphql-mesh/commit/482d813a9f75935024aa77872125d197f5fca3d0
github	www.github.com/ardatan/graphql-mesh/security/advisories/GHSA-rr4x-crhf-8886

27 Feb 2025 21:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 45.1

EPSS0.00414

SSVC