Lucene search
Redhat.comRH:CVE-2022-37734HistorySep 14, 2022 - 1:14 p.m.
CVE-2022-37734
2022-09-1413:14:43
redhat.com
access.redhat.com
28
graphql java
denial of service
malicious query
input validation
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
58.9%
A flaw was found in GraphQL Java. This flaw allows an attacker to use a malicious query in GraphQL to cause a denial of service due to inefficient lexer input validation.
Related
nvd
nvd
CVE-2022-37734
2022-09-12 14:15:09
ibm
ibm
cve
cve
CVE-2022-37734
2022-09-12 14:15:09
veracode
veracode
Denial Of Services (DoS)
2022-09-13 06:20:23
prion
prion
Design/Logic Flaw
2022-09-12 14:15:00
cvelist
cvelist
CVE-2022-37734
2022-09-12 13:14:35
github
github
osv
osv
graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources
2022-09-13 00:00:39
CVE-2022-37734
2022-09-12 14:15:09
redhat
redhat
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
58.9%
Related for RH:CVE-2022-37734