Enviar #731106: birkir prime <=0.4.0 GraphQL Directive Information Disclosureinformación

Títulobirkir prime <=0.4.0 GraphQL Directive Information Disclosure
DescripciónThis vulnerability allows the leakage of the instruction names, parameters and default values defined by the server through introspection queries or error messages. This will enable attackers to obtain security architectures such as authentication mechanisms, rate-limiting configurations, and sensitive field markings by crafting malicious error queries, providing precise attack references for them.
Fuente⚠️ https://github.com/birkir/prime/issues/546
Usuario
 ZAST.AI (UID 87884)
Sumisión2026-01-03 12:39 (hace 10 meses)
Moderación2026-01-19 08:15 (16 days later)
EstadoAceptado
Entrada de VulDB341769 [birkir prime hasta 0.4.0.beta.0 GraphQL Directive /graphql divulgación de información]
Puntos19

Do you want to use VulDB in your project?

Use the official API to access entries easily!