Executive brief
SilverStripe GraphQL Server permission checker not inherited by query subclass.
Affected products
- Packagist silverstripe/graphql
Junglewise Threat Intelligence
CVE-2021-28661: SilverStripe GraphQL Server permission checker not inherited by query subclass.
CVE-2021-28661 · Severity: low · CVSS 3.1 · Published 2021-10-12
Technologies: silverstripe/graphql (Packagist). Vendors: Packagist.