Overview
About vulnerability
The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim’s browser might leak confidential information to the attacker’s website.
More precisely, an application is vulnerable when all the following are true:
- the application has the GraphiQL endpoint enabled and exposed
- a victim with an active session follows a malicious link to the GraphiQL page of the application
Details
- Affected product:
- Spring
- Affected packages:
- Spring Boot @ 2.7.18 (+1092 more)