CVE-2023-28104 - Vulnerability Details - OpenCVE

`silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpoint. This mostly affects websites with particularly large/complex graphql schemas. Users should upgrade to `silverstripe/graphql` 4.2.3 or 4.1.2 to remedy the vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Silverstripe	Graphql

Configuration 1 [-]

OR	cpe:2.3:a:silverstripe:graphql:4.1.1:::::::*
	cpe:2.3:a:silverstripe:graphql:4.2.2:::::::*

No data.

References

Link	Providers
https://github.com/silverstripe/silverstripe-graphql/pull/526
https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2
https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3
https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-03-16T15:25:30.551Z

Updated: 2024-08-02T12:30:24.268Z

Reserved: 2023-03-10T18:34:29.226Z

Link: CVE-2023-28104

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-03-16T16:15:12.750

Modified: 2024-11-21T07:54:24.717

Link: CVE-2023-28104

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-28104", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-03-10T18:34:29.226Z", "datePublished": "2023-03-16T15:25:30.551Z", "dateUpdated": "2024-08-02T12:30:24.268Z"}, "containers": {"cna": {"title": "silverstripe/graphql Denial of Service vulnerability", "problemTypes": [{"descriptions": [{"cweId": "CWE-770", "lang": "en", "description": "CWE-770: Allocation of Resources Without Limits or Throttling", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3"}, {"name": "https://github.com/silverstripe/silverstripe-graphql/pull/526", "tags": ["x_refsource_MISC"], "url": "https://github.com/silverstripe/silverstripe-graphql/pull/526"}, {"name": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2"}, {"name": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3", "tags": ["x_refsource_MISC"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3"}], "affected": [{"vendor": "silverstripe", "product": "silverstripe-graphql", "versions": [{"version": "= 4.1.1", "status": "affected"}, {"version": "= 4.2.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-03-16T15:25:30.551Z"}, "descriptions": [{"lang": "en", "value": "`silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpoint. This mostly affects websites with particularly large/complex graphql schemas. Users should upgrade to `silverstripe/graphql` 4.2.3 or 4.1.2 to remedy the vulnerability."}], "source": {"advisory": "GHSA-67g8-c724-8mp3", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:30:24.268Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3"}, {"name": "https://github.com/silverstripe/silverstripe-graphql/pull/526", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/silverstripe/silverstripe-graphql/pull/526"}, {"name": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2"}, {"name": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:silverstripe:graphql:4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "FF57E3F0-F64D-4656-8B9B-5299FCF2AEBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:silverstripe:graphql:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "13FF549B-58BF-4074-BB38-BFF96093495B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "`silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpoint. This mostly affects websites with particularly large/complex graphql schemas. Users should upgrade to `silverstripe/graphql` 4.2.3 or 4.1.2 to remedy the vulnerability."}], "id": "CVE-2023-28104", "lastModified": "2024-11-21T07:54:24.717", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-03-16T16:15:12.750", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/silverstripe/silverstripe-graphql/pull/526"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Release Notes"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Release Notes"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/silverstripe/silverstripe-graphql/pull/526"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Release Notes"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.1.2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Release Notes"], "url": "https://github.com/silverstripe/silverstripe-graphql/releases/tag/4.2.3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-67g8-c724-8mp3"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-770"}], "source": "nvd@nist.gov", "type": "Primary"}]}