CVE-2021-47748

概要

参考情報

• hasura/graphql-engine · Product
• exploit-db.com/exploits/49802 · Exploit
• vulncheck.com/advisories/hasura-graphql-remote-code-execution · Third Party Advisory

graphql engine のその他の脆弱性

• CVE-2026-54698中 5.9Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a where clause on a ta…
• CVE-2021-47715中 5.3Hasura GraphQL 1.3.3 contains a server-side request forgery vulnerability that allows attackers to inject arbitrary remote schema URLs throu…
• CVE-2021-47714中 5.5Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the quer…
• CVE-2021-47713高 7.5Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL…
• CVE-2023-27588高 7.5Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura …