PT-2024-28780
CVE-2024-40094
·
تاريخ النشر
2024-07-30
·
تاريخ التحديث
2026-09-24
الوصف من
CVSS 4.0
8.7
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
GraphQL Java versions prior to 21.5
GraphQL Java version 20.9
GraphQL Java version 19.11
Description
The issue is related to the improper consideration of ExecutableNormalizedFields (ENFs) in preventing denial of service via introspection queries. This can lead to a denial of service.
Recommendations
For versions prior to 21.5, update to version 21.5 or later to resolve the issue.
For version 20.9, no additional action is required as it is a fixed version.
For version 19.11, no additional action is required as it is a fixed version.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾