CVE-2024-50312
published 2024-10-22CVE-2024-50312: A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a…
PriorityP430medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.52%
40.7th percentile
A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
GraphQL: Information Disclosure via GraphQL Introspection in OpenShift
vendor_redhat·2024-10-17·CVSS 5.3
CVE-2024-50312 [MEDIUM] CWE-200 GraphQL: Information Disclosure via GraphQL Introspection in OpenShift
GraphQL: Information Disclosure via GraphQL Introspection in OpenShift
A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.
A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL imp
OSV
Graphql: information disclosure via graphql introspection in openshift in github.com/openshift/console
osv·2024-10-28
CVE-2024-50312 Graphql: information disclosure via graphql introspection in openshift in github.com/openshift/console
Graphql: information disclosure via graphql introspection in openshift in github.com/openshift/console
Graphql: information disclosure via graphql introspection in openshift in github.com/openshift/console
GHSA
GHSA-7f25-p8gc-hxqh: A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query
ghsa_unreviewed·2024-10-22
CVE-2024-50312 [MEDIUM] CWE-200 GHSA-7f25-p8gc-hxqh: A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query
A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-22
Published