CVE-2022-31173CWE-400

Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

High · published August 1, 2022

CVSS v3.1
7.5
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01721 · 77.3th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-08-01T18:50Z
EPSS history
Timeline
  • 01 AUG 18:50Z
    Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow
    cvelistv5