CVE-2023-40180highCWE-400

CVE-2023-40180: fallo de gravedad alta en silverstripe-graphql

Denial of service vulnerability in silverstripe-graphql via recursive queries

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear silverstripe-graphql+ Monitorear silverstripe/graphql

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 1.1%
silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a recursive graphql query to execute a Distributed Denial of Service attack (DDOS attack) against a website. This mostly affects websites with publicly exposed graphql schemas. If your Silverstripe CMS project does not expose a public facing graphql schema, a user account is required to trigger the DDOS attack. If your site is hosted behind a content delivery network (CDN), such as Imperva or CloudFlare, this may further mitigate the risk. This issue has been addressed in versions 3.8.2, 4.1.3, 4.2.5, 4.3.4, and 5.0.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
silverstripe · silverstripe-graphql
CVEs relacionadas — silverstripe-graphql

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-28104HIGHsilverstripe/graphql Denial of Service vulnerabilityEPSS 1.1%CVE-2023-44401MEDIUMSilverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM dataEPSS 0.4%