Vulnerabilities
Can Unauthenticated GraphQL Mutations in Chaskiq 2.0.3 Steal Cloud Metadata?
A critical flaw in Chaskiq versions up to 2.0.3 allows attackers to fetch internal URLs, including cloud metadata, without credentials.
GraphQL
Everything Sandbox Dispatch has reported about GraphQL: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
How do forged TinaCMS preview iframes let attackers run GraphQL mutations with editor credentials?
A critical vulnerability in TinaCMS allows attackers to forge preview iframes and execute GraphQL mutations using a logged-in editor's credentials.