Graphql-java

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Graphql-java records in CISA KEV

No Graphql-java vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Graphql-java · all components

TI-2023-13371 CVE-2023-28867 · GHSA-p4qx-6w5p-4rj2

MEDIUM 41

In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01059 Published 2023-03-27 Partial fix · 0.0.0-2023-03-20T01-49-44-80e3135, 17.5 +3 CWE-770