Executive brief
Apollo Router Unnamed "Subscription" operation results in Denial-of-Service
Affected products
- crates.io apollo-router
Junglewise Threat Intelligence
CVE-2023-41317: Apollo Router Unnamed "Subscription" operation results in Denial-of-Service
CVE-2023-41317 · Severity: low · CVSS 3.1 · Published 2023-09-07
Technologies: apollo-router (crates.io). Vendors: crates.io.
Related threats
- Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies
- Apollo Query Planner infinite loop on complex queries
- Apollo Router vulnerable to Critical Regression In Query Plan Cache
- Apollo Router's Compressed Payloads do not respect HTTP Payload Limits
- Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions