Gửi #731106: birkir prime <=0.4.0 GraphQL Directive Information Disclosurethông tin

tiêu đềbirkir prime <=0.4.0 GraphQL Directive Information Disclosure
Mô tảThis vulnerability allows the leakage of the instruction names, parameters and default values defined by the server through introspection queries or error messages. This will enable attackers to obtain security architectures such as authentication mechanisms, rate-limiting configurations, and sensitive field markings by crafting malicious error queries, providing precise attack references for them.
Nguồn⚠️ https://github.com/birkir/prime/issues/546
Người dùng
 ZAST.AI (UID 87884)
Đệ trình03/01/2026 12:39 (cách đây 9 các tháng)
Kiểm duyệt19/01/2026 08:15 (16 days later)
Trạng tháiđược chấp nhận
Mục VulDB341769 [birkir prime đến 0.4.0.beta.0 GraphQL Directive /graphql tiết lộ thông tin]
điểm19

Interested in the pricing of exploits?

See the underground prices here!