Stack-based Buffer Overflow Affecting com.graphql-java:graphql-java package, versions [,0.0.0-2023-03-20T01-49-44-80e3135) [1.2,17.5) [18.0,18.4) [19.0,19.4) [20.0,20.1)
Threat Intelligence
EPSS
0.17% (56th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-COMGRAPHQLJAVA-5291199
- published 27 Mar 2023
- disclosed 27 Mar 2023
- credit Unknown
Introduced: 27 Mar 2023
CVE-2023-28867 Open this link in a new tabHow to fix?
Upgrade com.graphql-java:graphql-java to version 0.0.0-2023-03-20T01-49-44-80e3135, 17.5, 18.4, 19.4, 20.1 or higher.
Overview
Affected versions of this package are vulnerable to Stack-based Buffer Overflow when processing a deeply recursive GraphQL query. An attacker can send such a query to exhaust stack memory and cause a crash.
CVSS Scores
version 3.1