Submeter #731106: birkir prime <=0.4.0 GraphQL Directive Information Disclosureinformação

Títulobirkir prime <=0.4.0 GraphQL Directive Information Disclosure
DescriçãoThis vulnerability allows the leakage of the instruction names, parameters and default values defined by the server through introspection queries or error messages. This will enable attackers to obtain security architectures such as authentication mechanisms, rate-limiting configurations, and sensitive field markings by crafting malicious error queries, providing precise attack references for them.
Fonte⚠️ https://github.com/birkir/prime/issues/546
Utilizador
 ZAST.AI (UID 87884)
Submissão03/01/2026 12h39 (há 9 meses)
Moderação19/01/2026 08h15 (16 days later)
EstadoAceite
Entrada VulDB341769 [birkir prime até 0.4.0.beta.0 GraphQL Directive /graphql Divulgação de Informação]
Pontos19

Do you know our Splunk app?

Download it now for free!