CVE-2021-47714

概要

参考情報

• hasura/graphql-engine · Product
• exploit-db.com/exploits/49790 · Exploit
• vulncheck.com/advisories/hasura-graphql-local-file-read-via-sql-injection · Exploit

graphql engine のその他の脆弱性

• CVE-2026-54698中 5.9Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a where clause on a ta…
• CVE-2021-47748緊急 9.8Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL qu…
• CVE-2021-47715中 5.3Hasura GraphQL 1.3.3 contains a server-side request forgery vulnerability that allows attackers to inject arbitrary remote schema URLs throu…
• CVE-2021-47713高 7.5Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL…
• CVE-2023-27588高 7.5Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura …