Hasura Graphql
Approved changes feed: RSS · Atom
cpe:2.3:a:hasura:hasura_graphql:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hasura (06d0bbac-ff6d-5740-8bd3-432231a37a86) |
|---|---|
| Product | Hasura Graphql (004c0563-3ffa-5e2e-9630-1d723e9a1bf7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47715 |
vulnerable | 2026-06-08 05:38:07.448950 |
Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection
MEDIUM (5.3)
Hasura GraphQL 1.3.3 contains a server-side request forgery vulnerability that allows attackers to inject arbitrary remote schema URLs through the add_remote_schema endpoint. Attackers can exploit the vulnerability by sending crafted POST requests to the /v1/query endpoint with malicious URL definitions to potentially access internal network resources.
Published: 2025-12-22T21:35:25.534Z
Updated: 2026-08-14T16:49:18.458Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47714 |
vulnerable | 2026-06-08 05:38:07.448497 |
Hasura GraphQL 1.3.3 Local File Read via SQL Injection
MEDIUM (5.5)
Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the query endpoint. Attackers can exploit the pg_read_file() PostgreSQL function by crafting malicious SQL queries to read arbitrary files on the server.
Published: 2025-12-22T21:35:25.094Z
Updated: 2026-08-14T16:49:17.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47713 |
vulnerable | 2026-06-08 05:38:07.447119 |
Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query
HIGH (7.5)
Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL queries with excessive nested fields. Attackers can send repeated requests with extremely long query strings and multiple threads to consume server resources and potentially crash the GraphQL endpoint.
Published: 2025-12-22T21:35:24.561Z
Updated: 2026-08-14T16:49:17.118Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.