CVE-2021-47713
HIGHHasura GraphQL 1.3.3 - Denial of Service via Malicious GraphQL Query
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47713. PoCs published by Dolev Farhi.
AI-analyzed exploit summary This exploit targets Hasura GraphQL 1.3.3 by creating a table, inserting a large row, and then flooding the server with oversized GraphQL queries to cause a Denial of Service (DoS). It uses multiple threads to amplify the attack.
Description
Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL queries with excessive nested fields. Attackers can send repeated requests with extremely long query strings and multiple threads to consume server resources and potentially crash the GraphQL endpoint.
Exploits (1)
This exploit targets Hasura GraphQL 1.3.3 by creating a table, inserting a large row, and then flooding the server with oversized GraphQL queries to cause a Denial of Service (DoS). It uses multiple threads to amplify the attack.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H