Description (CNA)
Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the underlying repository. An attacker can forge a malicious query for a Connection field that can exhaust application memory or place significant, prolonged load on the underlying datastore, resulting in a Denial of Service. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0 - 1.4.6 Spring for GraphQL 1.2.0 - 1.3.9
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Spring / Spring for GraphQL | affected 2.0.0 through 2.0.4; affected 1.4.0 through 1.4.6; affected 1.2.0 through 1.3.9 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.