Submit #731106: birkir prime <=0.4.0 GraphQL Directive Information Disclosureinfo

Titelbirkir prime <=0.4.0 GraphQL Directive Information Disclosure
BeschreibungThis vulnerability allows the leakage of the instruction names, parameters and default values defined by the server through introspection queries or error messages. This will enable attackers to obtain security architectures such as authentication mechanisms, rate-limiting configurations, and sensitive field markings by crafting malicious error queries, providing precise attack references for them.
Quelle⚠️ https://github.com/birkir/prime/issues/546
Benutzer
 ZAST.AI (UID 87884)
Einreichung03.01.2026 12:39 (vor 5 Monaten)
Moderieren19.01.2026 08:15 (16 days later)
StatusAkzeptiert
VulDB Eintrag341769 [birkir prime bis 0.4.0.beta.0 GraphQL Directive /graphql Information Disclosure]
Punkte19

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!