Vulnerability Database
296,137
Total vulnerabilities in the database
silverstripe/graphql Cross-Site Request Forgery vulnerability
The GraphQL controller lacked any CSRF protection, meaning authenticated users could be forced or tricked into visiting a URL that would send a GET request to the affected web server that could mutate or destroy data without the user knowing.
| Software | From | Fixed in |
|---|---|---|
silverstripe / graphql
|
2.0.0 | 2.0.3 |