CVE-2021-28661

Published October 7th, 2021

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

4

MEDIUM

Affected

1

PROJECT

Description

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

silverstripe/silverstripe-graphql

Serves Silverstripe data as GraphQL representations

GitHub

51