CVE-2019-1020015

概要

参考情報

• hasura/graphql-engine commit f2f14e7 · Patch

graphql engine のその他の脆弱性

• CVE-2026-54698中 5.9Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a where clause on a ta…
• CVE-2021-47748緊急 9.8Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL qu…
• CVE-2021-47715中 5.3Hasura GraphQL 1.3.3 contains a server-side request forgery vulnerability that allows attackers to inject arbitrary remote schema URLs throu…
• CVE-2021-47714中 5.5Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the quer…
• CVE-2021-47713高 7.5Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL…