提出 #731106: birkir prime <=0.4.0 GraphQL Directive Information Disclosure情報

タイトルbirkir prime <=0.4.0 GraphQL Directive Information Disclosure
説明This vulnerability allows the leakage of the instruction names, parameters and default values defined by the server through introspection queries or error messages. This will enable attackers to obtain security architectures such as authentication mechanisms, rate-limiting configurations, and sensitive field markings by crafting malicious error queries, providing precise attack references for them.
ソース⚠️ https://github.com/birkir/prime/issues/546
ユーザー
 ZAST.AI (UID 87884)
送信2026年01月03日 12:39 (10 月 ago)
モデレーション2026年01月19日 08:15 (16 days later)
ステータス承諾済み
VulDBエントリ341769 [birkir prime 迄 0.4.0.beta.0 GraphQL Directive /graphql 情報漏えい]
ポイント19

Do you want to use VulDB in your project?

Use the official API to access entries easily!