Lucene search
HistorySep 12, 2022 - 2:15 p.m.
CVE-2022-37734
vulnerability
graphql-java
denial of service
fixed versions
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
58.9%
graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9.
Affected configurations
Node
graphql-java_projectgraphql-javaRange<17.4java
ORgraphql-java_projectgraphql-javaRange18.0–18.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| graphql-java_project | graphql-java | * | cpe:2.3:a:graphql-java_project:graphql-java:*:*:*:*:*:java:*:* |
| graphql-java_project | graphql-java | * | cpe:2.3:a:graphql-java_project:graphql-java:*:*:*:*:*:*:*:* |
Related
redhatcve
redhatcve
CVE-2022-37734
2022-09-14 13:14:43
ibm
ibm
cve
cve
CVE-2022-37734
2022-09-12 14:15:09
veracode
veracode
Denial Of Services (DoS)
2022-09-13 06:20:23
prion
prion
Design/Logic Flaw
2022-09-12 14:15:00
cvelist
cvelist
CVE-2022-37734
2022-09-12 13:14:35
github
github
osv
osv
graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources
2022-09-13 00:00:39
CVE-2022-37734
2022-09-12 14:15:09
redhat
redhat
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
58.9%
Related for NVD:CVE-2022-37734