CVE-2021-47713

概要

参考情報

• hasura/graphql-engine · Product
• exploit-db.com/exploits/49789 · Exploit
• vulncheck.com/advisories/hasura-graphql-denial-of-service-via-malicious-graphql-query · Exploit

graphql engine のその他の脆弱性

• CVE-2026-54698中 5.9Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a where clause on a ta…
• CVE-2021-47748緊急 9.8Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL qu…
• CVE-2021-47715中 5.3Hasura GraphQL 1.3.3 contains a server-side request forgery vulnerability that allows attackers to inject arbitrary remote schema URLs throu…
• CVE-2021-47714中 5.5Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the quer…
• CVE-2023-27588高 7.5Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura …