CVE-2021-47715

概要

参考情報

• hasura/graphql-engine · Product
• exploit-db.com/exploits/49791 · Exploit
• vulncheck.com/advisories/hasura-graphql-server-side-request-forgery-via-remote-schema-injection · Exploit

graphql engine のその他の脆弱性

• CVE-2026-54698中 5.9Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a where clause on a ta…
• CVE-2021-47748緊急 9.8Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL qu…
• CVE-2021-47714中 5.5Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the quer…
• CVE-2021-47713高 7.5Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL…
• CVE-2023-27588高 7.5Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura …