Skip to content
OpenAdvisories

Product · silverstripe

silverstripe-graphql

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Denial of service vulnerability in silverstripe-graphql via recursive queries

    silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a recursive graphql query to execute a Distributed Denial of Service attack (DDOS attack) against a website. This mostly affects websites with p…

  • High 7.5

    silverstripe/graphql Denial of Service vulnerability

    `silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpo…